Data Security and Risk Management

What are the two main components that usually make up a high-risk scenario?

• High likelihood and low impact

• Low likelihood and high impact

• Low likelihood and low impact

• High likelihood and high impact

What is a risk matrix used for?

• To calculate the financial cost of risks

• To give a numerical value to risks

• To eliminate all risks

• To identify the source of risks

What does unauthorized access to data typically involve?

• Accidental viewing of data

• Legal hacking with permission

• Accessing systems without permission

• Data loss due to equipment failure

What is espionage in the context of information security?

• Accidental data access

• Long-term spying to gather secrets

• Legal data monitoring

• A single hacking attempt

What can cause unintended access to data?

• Deliberate hacking

• Accidental data deletion

• Mistakes or lack of knowledge

• Intentional data tampering

What is the main difference between data access and data loss?

• Access involves viewing data, loss means data is irretrievable

• Access is intentional, loss is accidental

• Access is caused by equipment failure, loss is caused by hacking

• Access is always legal, loss is always illegal

What is an example of intentional destruction of data?

• A hard drive failing

• A virus spreading and deleting data

• Accidentally deleting a file

• A technician misconfiguring access levels

Why might an attacker intentionally destroy data?

• To back up the data

• To legally access information

• To make it harder for an organization to operate

• To accidentally stumble upon secrets

What does intentional tampering of data involve?

• Backing up data

• Accidentally losing data

• Viewing data without changing it

• Modifying data to benefit the attacker

Which principle is most affected by data tampering?

• Confidentiality

• Availability

• Integrity

• Accessibility