MidExam InfoAssuSec2

What are the Five Information Assurance Pillars?

• Confidentiality, Integrity, Availability, Authentication, Authorization

• Confidentiality, Integrity, Availability, Authorization, Non-Repudiation

• Confidentiality, Integrity, Availability, Authentication, Non-Repudiation

• Confidentiality, Integrity, Availability, Authentication, Accountability

What is the main goal of Information Assurance?

• 
  To ensure the confidentiality, integrity, and availability of information

• To delete all information

• To provide unlimited access to information

• To restrict access to information

What is the main purpose of Security Countermeasures in Information Assurance?

• To slow down information processing

• To protect information systems from threats

• 
  To expose information to unauthorized parties

• 
  To increase vulnerabilities

What does Defense in Depth refer to?

• Securing the physical door

• Security through layers of a building

• Securing only the external perimeter

• Securing only the internal part of a building

Which of the following is part of the CIA Triangle?

• Confidentiality, Integrity, and Authorization

• Confidentiality, Integrity, and Authentication

• 
  Confidentiality, Integrity, and Accountability

• Confidentiality, Integrity, and Availability

What is the main goal of Non-repudiation?

• 
  Proving the legitimacy of a message or data transfer

• 
  Ensuring data is accurate and valid

• 
  Protecting data from unauthorized changes

• Providing undeniable evidence of authenticity and integrity

What are Assets in the context of information security?

• 
  Organizational resources being protected

• Weaknesses in data confidentiality

• Probabilities of threats becoming realities

• 
  Parameters implemented to protect data

What is a Threat in the context of information security?

• An organizational resource being protected

• 
  The act of verifying identification

• 
  A weakness in data confidentiality

• 
  A possibility of data or systems being compromised

What do Security Controls refer to?

• 
  Regulations on user access levels

• Processes to limit or allow access based on roles

• Parameters implemented to protect data

• Safeguards or countermeasures used to protect data and infrastructure

What is the purpose of Administrative Network Security?

• 
  Manage user access levels within the network

• Focus on protecting data within the network

• Prevent unauthorized personnel from accessing network components

• 
  Implement measures to ensure only authorized individuals interact with network elements