aswa

. What are the fundamental principles of an ISMS?

• Confidentiality, Integrity, Availability (CIA)

• Risk avoidance

• Authorization

• Auditing

Which activity aims to reduce the probability, negative consequences, or both, associated with risk?

  

• Risk avoidance

• Authorization

• Auditing

• Information assurance

. What is the process called when checking the authentication of an individual or resource to establish their authorized use of information or other assets?

  

• Risk avoidance

• Authorization

• Auditing

• Authentication

. What is the term for the formal or informal review of actions, processes, policies, and procedures?

  

• Authorization

• Auditing

• Compliance

• Risk avoidance

. What is the term for working in accordance with laid-down actions, processes, policies, and procedures without independent reviews?

• Compliance

• Auditing

• Risk avoidance

• Authorization

 

6. What is the term for a technique criticized as being guesswork without real empirical data or scientific basis?

  

• Scientific method

• Compliance

• Auditing

• Authorization

. What are the formulas used to calculate risk exposure and exposure rating in the given approach?

• Sensitive* severity * likelihood

• Risk avoidance *compliance *authorization

• Auditing *risk exposure *risk assessment

• Compliance *sensitivity *likelihood

What term describes the concept of placing multiple layers of security controls within a system?

  

• Defense-in-depth

• Risk avoidance

• Authorization

• Compliance

. What is the primary benefit of implementing appropriate information security within an organization?

• Risk reduction

• Protect sensitive data

• Compliance

• Auditing

. How would you describe the concept of non-repudiation?

   

• The assurance that someone cannot deny the validity of something

• Risk avoidance

• Compliance

• Authorization