Which statement describes why information assets must be identified for cybersecurity purposes?

• Because you cannot protect what you have not identified

• Because you should only protect what you have identified

• Because you can only identify some information assets

• Because you should only identify those information assets that are the most important

Which statement describes the purpose of a data classification system for cybersecurity?

• To ensure filenames are compliant with the naming policy rules

• To identify information assets and protect them from a loss of confidentiality, integrity and availability

• To describe all possible vulnerabilities in the system

• To initiate a threat assessment protocol

Inappropriate file access to, or disclosure of, protectively marked information, whether by an adversary or accidentally, is a loss of:

• Availability

• Confidentiality

• Integrity

• Availability and Confidentiality

User error resulting in the access to, modification of, and disclosure confidential information assets represents a loss of:

• Confidentiality

• Confidentiality and Integrity

• Availability and Integrity

• Availability

What is the term used to describe ensuring that authorized parties are able to access the information when it is needed?

• Confidentiality

• Integrity

• Availability

• Asset identification

Which term refers to a circumstance or event with the potential to have an adverse effect on organizational operations?

• Threat

• Vulnerability

• Attack

• Exploit

Which term refers to a weakness in an information system, system security procedures, internal controls, or implementation?

• Threat

• Vulnerability

• Attack

• Exploit

Which term refers to an attempt that exploits a weakness and compromises system integrity, availability, or confidentiality?

• Threat

• Vulnerability

• Attack

• Exploit

Fire, flood, or an adverse weather event impacting the security of information assets is known as a:

• Threat

• Bug

• Attack

• Exploit

A software bug that can cause a buffer overflow in a computer program resulting in a loss of confidentiality, integrity, or availability is known as a:

• Threat

• Vulnerability

• Attack

• Exploit