Cybersecurity Chapter 2A Quiz

Describe the three dimensions of the McCumber Cube (Cybersecurity Cube).

• Data Types, Access Controls, Risk Assessment

• Network Protocols, Threat Models, Compliance Standards

• User Authentication, Incident Response, Data Encryption

• Information States, Security Measures, and Security Goals.

Answer explanation

The McCumber Cube's three dimensions are Information States (data at rest, in transit, and in use), Security Measures (controls and safeguards), and Security Goals (confidentiality, integrity, and availability), making this the correct choice.

Describe the principles of confidentiality, integrity, and availability.

• Confidentiality ensures data is always available, integrity prevents data from being modified, and availability protects data from being lost.

• Confidentiality protects information from unauthorized access, integrity ensures data accuracy and consistency, and availability guarantees access to information when required.

• Confidentiality allows sharing information freely, integrity focuses on data speed, and availability restricts access to information.

• Confidentiality is about data encryption, integrity is about data storage, and availability is about data backup.

Answer explanation

The correct choice accurately defines the principles: confidentiality protects against unauthorized access, integrity ensures data accuracy, and availability guarantees access when needed.

Differentiate the three states of data.

Answer explanation

Data exists in three states: structured (organized in a defined format), semi-structured (contains tags or markers for separation), and unstructured (no predefined format, like text or images). Each state serves different purposes.

Compare the types of cybersecurity countermeasures.

• The types of cybersecurity countermeasures are offensive, defensive, and reactive.

• The types of cybersecurity countermeasures are physical, administrative, and technical.

• The types of cybersecurity countermeasures are analytical, strategic, and tactical.

• The types of cybersecurity countermeasures are preventive, detective, and corrective.

Answer explanation

The correct choice identifies the three main types of cybersecurity countermeasures: preventive measures stop attacks before they occur, detective measures identify incidents as they happen, and corrective measures address and mitigate the impact after an incident.

Describe the ISO Cybersecurity Model.

Answer explanation

The ISO Cybersecurity Model provides a framework for managing cybersecurity risks, focusing on continuous improvement, risk assessment, and the integration of security into organizational processes to enhance resilience against threats.

What are the greatest challenges in protecting transmitted data?

• Protecting data confidentiality

• Protecting data integrity

• Protecting data availability

Answer explanation

The greatest challenges in protecting transmitted data include ensuring confidentiality (preventing unauthorized access), integrity (maintaining accuracy), and availability (ensuring access when needed). All three are crucial for data security.

What does data in process refer to?

• Data in process refers to information currently being manipulated or transformed within a system.

• Data in process means data that has been deleted.

• Data in process is information stored on a hard drive.

• Data in process refers to archived information.

Answer explanation

Data in process specifically refers to information that is actively being manipulated or transformed within a system, making it the correct choice. The other options describe different states of data.

What are software-based technology safeguards?

• Programs and services that protect systems

• Physical devices installed in the network

• Cloud-based technologies

Answer explanation

Software-based technology safeguards refer to programs and services designed to protect systems from threats. This distinguishes them from physical devices or cloud technologies, which do not inherently provide software protection.

What is the purpose of a security policy?

• To provide rules of behavior for users

• To ensure data availability

• To maintain hardware consistency

Answer explanation

The purpose of a security policy is to provide rules of behavior for users, ensuring they understand their responsibilities and the acceptable use of resources, which helps protect the organization's information and assets.

What does the ISO 27000 standard provide?

• A framework for information security management

• Mandatory requirements for all organizations

• A checklist for cybersecurity professionals

Answer explanation

The ISO 27000 standard provides a framework for information security management, helping organizations establish, implement, and maintain effective information security practices. It is not mandatory or a simple checklist.