Module 3

What is an asset in the context of an organization?

• A liability that the organization must manage

• An item perceived as having value to an organization

• A document that outlines company policies

• A type of insurance policy

What are attack vectors?

• The tools used to encrypt data

• The pathways attackers use to penetrate security defenses

• The software used to monitor network traffic

• The methods used to back up data

What is the process of verifying who someone is called?

• Authorization

• Encryption

• Authentication

• Identification

What does authorization refer to in a system?

• Granting access to specific resources

• Encrypting sensitive data

• Monitoring network traffic

• Identifying potential security threats

What does availability mean in the context of data security?

• Data is always encrypted

• Data is accessible to those who are authorized to access it

• Data is stored in multiple locations

• Data is only accessible during business hours

What are biometrics used for?

• Encrypting data

• Verifying a person’s identity using unique physical characteristics

• Monitoring network traffic

• Backing up data

What is the confidentiality, integrity, availability (CIA) triad?

• A model for encrypting data

• A model that helps inform how organizations consider risk when setting up systems and security policies

• A type of biometric authentication

• A method for backing up data

What is the purpose of encryption?

• To convert data from a readable format to an encoded format

• To monitor network traffic

• To verify a person’s identity

• To grant access to specific resources

What does the NIST core function "Detect" involve?

• Identifying potential security incidents and improving monitoring capabilities

• Encrypting sensitive data

• Granting access to specific resources

• Verifying a person’s identity

What is the NIST core function "Identify" related to?

• Granting access to specific resources

• Monitoring network traffic

• Identifying potential security threats and vulnerabilities

• Encrypting data