DP - 1

What is the first step to help ensure the security of your application?

• Implementing security mechanisms

• Identifying security objectives

• Enhancing data processing systems

• Providing security services

Which security objective ensures that information is not disclosed to unauthorized individuals?

• Confidentiality

• Availability

• Integrity

• Authenticity

What does data integrity ensure?

• Information is not disclosed to unauthorized individuals

• Data is changed only in an authorized manner

• Systems perform their intended function

• Systems work promptly

Which security objective ensures that systems work promptly and service is not denied to authorized users?

• Authenticity

• Confidentiality

• Integrity

• Availability

What does authenticity refer to in the context of security?

• Preventing unauthorized access

• Tracing security breaches

• Ensuring data is not disclosed

• Being genuine and trusted

What is the security goal that generates the requirement for actions of an entity to be traced uniquely to that entity?

• Confidentiality

• Integrity

• Availability

• Accountability

These are any action that compromises the security of information owned by an organization. It attempts to gain unauthorized access to information resources or services, or cause harm or damage to information systems.

• Security attacks

• Security requirements

• Security services

• Security mechanisms

These are technical tools and techniques that are used to implement security services. A process that is designed to detect, prevent, or recover from a security attack.

• Security attacks

• Security requirements

• Security services

• Security mechanisms

This is a processing or communication service that enhances the security of the data processing systems, and the information transfers of an organization.

• Security attacks

• Security requirements

• Security services

• Security mechanisms

What are passive attacks like?

• Modifying stored data

• Creating false data

• Eavesdropping or monitoring transmissions

• Preventing access to systems