Cybersecurity Module 2

Which statement describes why information assets must be identified for cybersecurity purposes?

• Because you cannot protect what you have not identified.

• Because you should only protect what you have identified.

• Because you can only identify some information assets.

• Because you should only identify those information assets that are the most important.

User error resulting in the access to, modification of, and disclosure of confidential information assets represents a loss of:

• confidentiality

• confidentiality and integrity

• availability and integrity

• availability

Inappropriate file access to, or disclosure of, protectively marked information, whether by an adversary or accidentally, is a loss of:

• availability

• confidentiality

• integrity

• availability and confidentiality

Which statement describes the purpose of a data classification system for cybersecurity?

• to ensure filenames are compliant with the naming policy rules

• to identify information assets and protect them from a loss of confidentiality, integrity and availability

• to describe all possible vulnerabilities in the system

• to initiate a threat assessment protocol

What is the term used to describe ensuring that authorized parties are able to access the information when it is needed?

• confidentiality

• integrity

• availability

• asset identification

Which term refers to a circumstance or event with the potential to have an adverse effect on organizational operations?

• threat

• vulnerability

• attack

• exploit

Which term refers to a weakness in an information system, system security procedures, internal controls, or implementation?

• threat

• vulnerability

• attack

• exploit

Which term refers to an attempt that exploits a weakness and compromises system integrity, availability, or confidentiality?

• threat

• vulnerability

• attack

• exploit

Fire, flood, or an adverse weather event impacting the security of information assets is known as a:

• threat

• bug

• attack

• exploit

A software bug that can cause a buffer overflow in a computer program resulting in a loss of confidentiality, integrity, or availability is known as a:

• threat

• vulnerability

• attack

• exploit