ASM655 Chapter 1 Quiz

Organizations should be aware that information security planning and budgetary choices encompass three different groups of;

• Professionals in the realm of information technology

• Individuals within the realm of cybersecurity

• Individuals from other departments within the organization

• Freelance or external contractor hired in the organization

"Shields the organization's information assets against the numerous threats they encounter."

This statement refer to:

• The information security community

• The IT community

• The general business community

• The clients community

Which of the following are the areas of security?

• Network security

• Security Guard

• Communications security

• Operations security

• Cyber security

Information security, often abbreviated as InfoSec, is centered on safeguarding information and its inherent value-adding attributes, which encompass confidentiality, (a)   , and availability. This entails the utilization of technology to store and transmit information, alongside a range of protective measures including policies, training and awareness initiatives, and technology itself.

In the figure components of information security what was missing?

• Computer Security

• Data Security

• Network Security

• Cyber Security

"An attribute of information that characterizes its state as undivided, intact, and free from corruption."
This statement refer to;

• Confidentiality

• Integrity

• Security

• Availability

"An inherent flaw in an asset or the systems responsible for its protection." This statement refer to;

• Attack

• Exploit

• Phishing

• Vulnerability

"After an intruder gains entry to a system, the subsequent objective is to elevate privileges (privilege escalation) in order to obtain administrator- or root-level control."
This statement refer to;

• Sabotage or Vandalism

• Deviations in Quality of Service

• Espionage or Trespass

• Information Extortion

"Packet sniffers, Spoofing,

Pharming, and man-in-the-middle attacks"
What kind of attacks above?

• Malware

• Cyberterrorism

• Denial-of-Service (DoS)

• Communication interception

Which categories of the following falls under Deadly Sins of Software Security?

• Web Application

• Implementation

• Cryptographic

• Networking