6159 Module 1 Review

What is an 'exploit' in security technology?

• Some kind of resource of value that requires protection.

• A valuable person in your organization.

• A weakness in your system.

• A technique employed to compromise a system.

______ refers to the probability of an unwanted event occurring. Organizations must minimize this to align with their ____ appetite, which is the level and type of ____ the organization is willing to accept.

Match the following

• Action that damages/harms a system.

• Access

• A user's ability to impact a system.

• Asset

• Valued resource that needs protection.

• Attack

An​ (a)   is a technique employed to compromise a system, while an​ (b)   occurs when a vulnerability that is known to an attacker is present in the system.

• exploit
• exposure
• risk
• threat 
• software
• network

In cybersecurity, these terms refer to security mechanisms, policies, or procedures designed to counteract attacks, reduce risk, address vulnerabilities, and enhance overall security within an organization.

• Control, Safeguard, or Countermeasure.

• Vulnerabilities, Exposures, and Exploits.

• Subjects and Objects

• Threats and Threat Agents

Which categories best fit each term?

Groups:

(a) Part of an Information System

,

(b) Outside of an Information System

,

(c) Security Measures

,

(d) Vulnerability Types

• Unlocked Door to Server

• Attacks

• Open Network Port

• Hardware

• Software Flaw

• Security Posture

• Exploits

• Protection Profile

• Risk Assessment

• Software

• Networks

• Threats

In information security, what term refers to an instance where an information asset experiences damage, unauthorized modification, or unintended disclosure?

• Loss

• Weakness

• Vulnerability

• Exposure

What do you think comes first to last when setting up an Information System?

• Networks

• Hardware

• Software

• People

• Data

Which branch of the triangle best suits the point?

a

b

c

d

e

f

Stopping unauthorized access to system.

Ensuring system data remains unmodified.

Individual privacy rights.

Ensuring the system is open for users.

Protecting system uptime.

Protecting sensitive information.

​ ​ (a)   and (b)   are concepts that are often aligned with​ the CIA Triad .

• Authenticity
• Accountability
• Exploits 
• Exposures
• Vulnerabilities
• Hardware
• Software
• Networks
• Assets