Inappropriate file access to, or disclosure of, protectively marked information, whether by an adversary or accidentally, is a loss of:

User error resulting in the unauthorized access to, modification of, and disclosure confidential information assets represents a loss of:

Which term refers to a circumstance or event with the potential to have an adverse effect on organizational operations?

Which term refers to a weakness in an information system, system security procedures, internal controls, or implementation?

Which term refers to an attempt that exploits a weakness and compromises system integrity, availability, or confidentiality?

Fire, flood, or an adverse weather event potentially impacting the security of information assets is known as a:

A software bug that can cause a buffer overflow in a computer program resulting in a loss of confidentiality, integrity, or availability is known as a:

Human error resulting in a loss of confidentiality, integrity, or availability to an information resource is known as a:

Nation-state sponsored espionage activity is an example of:

Which term refers to an individual, group, organization, or government that conducts or has the intent to conduct detrimental activities?

The process of granting access to information technology (IT) system resources only to authorized users is a primary control for:

A firewall is an example of a security control providing:

The comparison of cryptographic file hashes can be used as a control for:

While the purpose of password complexity rules is to improve security, which statement describes a concern about the usefulness of this security measure?

The process of identifying the risks to system security and determining the probability of occurrence, the resulting impact, and the additional safeguards that mitigate this impact is known as: