GEE 27 | Long Quiz - MIDTERMS

Which set lists the three key objectives of computer security known as the CIA triad?

• Confidentiality, Integrity, Availability

• Confidentiality, Control, Access

• Communication, Integrity, Access

• Control, Integrity, Availability

A breach in confidentiality occurs when ____.

• information is disclosed without authorization

• information is improperly modified or destroyed

• a system operates with unauthorized interference

• access to a system is interrupted

Which term refers to any weakness in a system’s design or operation that can be exploited?

• Threat

• Vulnerability

• Risk

• Countermeasure

Which BEST describes an active attack?

• Gathering information without affecting resources

• A natural disaster disrupting operations

• An attempt to modify resources or disrupt operations

• Documenting security policies

Which is considered a system resource (asset)?

• Security policy

• Hardware and software

• Attack

• Countermeasure

The primary goal of a countermeasure is to ____.

• increase the chance of an attack

• reduce threats or vulnerabilities by preventing or minimizing attacks

• create new vulnerabilities for testing

• only detect attacks after they succeed

Which term denotes the likelihood of loss due to a threat exploiting a vulnerability?

• Risk

• Threat

• Vulnerability

• Attack

Information warfare is best described as ____.

• criminals monetizing stolen data

• one nation targeting another’s information systems as both target and weapon

• insiders misusing legitimate access

• vandalism by script kiddies only

A passive attack involves ____.

• modifying system resources

• disrupting system operations

• gathering information without altering resources

• injecting malware to destroy data

Which statement defines a security policy?

• A deliberate act to bypass security

• A set of guidelines/practices that dictate how to secure sensitive resources

• A tool to scan networks for vulnerabilities

• A risk formula for decision-making