To ensure the confidentiality, integrity, and availability of information

To delete all information

To provide unlimited access to information

To restrict access to information

To slow down information processing

To protect information systems from threats

To expose information to unauthorized parties

To increase vulnerabilities

Securing the physical door

Security through layers of a building

Securing only the external perimeter

Securing only the internal part of a building

Confidentiality, Integrity, and Authorization

Confidentiality, Integrity, and Authentication

Confidentiality, Integrity, and Accountability

Confidentiality, Integrity, and Availability

Proving the legitimacy of a message or data transfer

Ensuring data is accurate and valid

Protecting data from unauthorized changes

Providing undeniable evidence of authenticity and integrity

Organizational resources being protected

Weaknesses in data confidentiality

Probabilities of threats becoming realities

Parameters implemented to protect data

An organizational resource being protected

The act of verifying identification

A weakness in data confidentiality

A possibility of data or systems being compromised

Regulations on user access levels

Processes to limit or allow access based on roles

Parameters implemented to protect data

Safeguards or countermeasures used to protect data and infrastructure

Manage user access levels within the network

Focus on protecting data within the network

Prevent unauthorized personnel from accessing network components

Implement measures to ensure only authorized individuals interact with network elements

Providing confidentiality, integrity, and accuracy

Transforming information into a form that is impossible to duplicate

Converting plaintext into cipher text

Storing data in secure and secret form

Software applications and solutions designed to enhance the security of computer systems, networks, and data.

Act as a barrier between a trusted internal network and untrusted external networks, controlling incoming and outgoing traffic based on predefined security rules.

Detect, prevent, and remove malicious software from a computer system.

Monitor network traffic for suspicious activity or unauthorized access attempts and alert administrators.

Software applications and solutions designed to enhance the security of computer systems, networks, and data.

Act as a barrier between a trusted internal network and untrusted external networks, controlling incoming and outgoing traffic based on predefined security rules.

Detect, prevent, and remove malicious software from a computer system.

Monitor network traffic for suspicious activity or unauthorized access attempts and alert administrators.

Software applications and solutions designed to enhance the security of computer systems, networks, and data.

Act as a barrier between a trusted internal network and untrusted external networks, controlling incoming and outgoing traffic based on predefined security rules.

Detect, prevent, and remove malicious software from a computer system.

Monitor network traffic for suspicious activity or unauthorized access attempts and alert administrators.

Software applications and solutions designed to enhance the security of computer systems, networks, and data.

Act as a barrier between a trusted internal network and untrusted external networks, controlling incoming and outgoing traffic based on predefined security rules.

Detect, prevent, and remove malicious software from a computer system.

Monitor network traffic for suspicious activity or unauthorized access attempts and alert administrators.

Assist in bookkeeping and accounting.

Measure body temperature.

Scan barcodes at a supermarket.

Identify security weaknesses in systems, applications, or networks.

Unauthorized access, transmission, or leakage of sensitive data by monitoring and enforcing data usage policies.

Manage user identities, permissions, and access rights within an organization's IT environment.

Individual devices such as computers, laptops, smartphones, and tablets from malware, unauthorized access, and other security threats.

Collect, analyze, and correlate security event data from various sources across an organization's IT infrastructure.

Unauthorized access, transmission, or leakage of sensitive data by monitoring and enforcing data usage policies.

Manage user identities, permissions, and access rights within an organization's IT environment.

Individual devices such as computers, laptops, smartphones, and tablets from malware, unauthorized access, and other security threats.

Collect, analyze, and correlate security event data from various sources across an organization's IT infrastructure.

To identify, assess, and prioritize weaknesses in systems

To ignore security risks

To create new vulnerabilities in organizations

To hack into networks and applications

Web Application Vulnerability Analysis

Host-based Vulnerability Analysis

Network Vulnerability Analysis

Physical Security Vulnerability Analysis

Optimizing network speed

Controlling network bandwidth usage

Securing physical access points only

Monitoring and protecting internet-connected devices within a network

Software firewalls are more secure than hardware firewalls

Software firewalls are only used for cloud deployment, while hardware firewalls are for physical deployment

Hardware firewalls are more cost-effective than software firewalls

Software firewalls are installed on servers or virtual machines, while hardware firewalls are physical devices

Providing unlimited access to all websites

Blocking all incoming traffic

Increasing network speed

Helping users filter or categorize content according to certain parameters

Blocking items by adding them to a banned list

Allowing all content

Increasing network security

Monitoring user activity

Provides unlimited access to all websites

Increases network speed

Blocks all content

Allows content by adding items to an allowed list

To provide free internet access

To increase network speed

To block legitimate users

To trap hackers within the system

Network Authentication Token

Network Analysis Tool

Network Access Terminal

Network Address Translation

To improve network performance

To enhance network security

To create a secure tunnel over a public network

To misrepresent a network protocol to attack a network

To analyze network packets

To manage network traffic

To provide free internet access

To protect data by creating an encrypted tunnel

To block all incoming connections

To increase network speed

To trap hackers within the system

To analyze data packets in a network

Cyber attacks, phishing, and malware

Financial fraud, insider threats, and espionage

Energy, equipment, fire, and human threats

Water, air, and soil pollution

Access to streaming platforms

Access to online shopping websites

Access to specific portions of the Internet based on policy

Access to social media websites

To hide information and provide confidentiality, integrity, and nonrepudiation protection

To provide physical security to buildings

To manage user access control

To monitor network traffic for anomalies

To encrypt data transmissions

To act as a primary control for network security

To establish virtual private networks

To provide secure communication over public networks

To manage hardware and software configurations

To act as a proxy server

To provide secure communication between clients and the Internet

To inspect network traffic based on organizational policy and detect attacks

To act as a backup system for data

To provide secure communication over public networks

To manage configuration changes in IT systems

To monitor and prevent network intrusions

To provide IT support for day-to-day operations

To ensure proper labeling of media

To establish secure communication channels

To manage and implement changes to IT infrastructure in a controlled manner

To provide a copy of information assets and ensure business continuity

To track changes to configuration items

To act as a proxy server for network connections

To prevent unauthorized access to media

Protection against natural disasters

Safeguarding all media including tapes, disks, and printouts

Ensuring proper encryption of data transmissions

Managing hardware and software configurations

To ensure standardized methods and procedures for implementing changes

To provide IT support for day-to-day operations

To perform planned and timely system patches to mitigate security vulnerabilities

To track changes to configuration items

To enhance system speed

To improve network connectivity

To prevent actions on an object by unauthorized individuals

To increase system storage capacity

Discretionary Access Control Model

Mandatory Access Control Model

Role-Based Access Control Model

Access Control Matrix

It is only suitable for small organizations

It simplifies access management as subjects acquire permissions through their roles

It requires constant maintenance and monitoring

It allows subjects to directly assign permissions to objects

It is only suitable for small organizations

It simplifies access management as subjects acquire permissions through their roles

It requires constant maintenance and monitoring

It allows subjects to directly assign permissions to objects

Access Control Matrix

Rule-Based Access Control

Access Control Lists

Capability Tables

To provide unlimited access to all subjects

To limit access to resources based on subject roles

To restrict access to specific resources based on subject privileges

To grant access to all resources without any restrictions

Role-Based Access Control Model

Discretionary Access Control Model

Access Control Matrix

Mandatory Access Control Model

Role-Based Access Control Administration

Decentralized Access Control Administration

Centralized Access Control Administration

Mandatory Access Control Administration

To use simple rules to determine privileges

To control access based on information security classification

To determine access rights based on subject roles

To represent accessibility using individual or group permissions

Access Control Lists

Rule-Based Access Control

Context-Dependent Access Control

Content-Dependent Access Control