Which statement describes the purpose of a data classification system for cybersecurity?

Inappropriate file access to, or disclosure of, protectively marked information, whether by an adversary or accidentally, is a loss of:

User error resulting in the access to, modification of, and disclosure confidential information assets represents a loss of:

What is the term used to describe ensuring that authorized parties are able to access the information when it is needed?

Which term refers to a circumstance or event with the potential to have an adverse effect on organizational operations?

Which term refers to a weakness in an information system, system security procedures, internal controls, or implementation?

Which term refers to an attempt that exploits a weakness and compromises system integrity, availability, or confidentiality?

Fire, flood, or an adverse weather event impacting the security of information assets is known as a:

A software bug that can cause a buffer overflow in a computer program resulting in a loss of confidentiality, integrity, or availability is known as a:

Human error resulting in a loss of confidentiality, integrity, or availability to an information resource is known as a:

Nation-state sponsored espionage activity is an example of:

Which term refers to an individual, group, organization, or government that conducts or has the intent to conduct detrimental activities?

Ransomware attacks such as WannaCry that lock files until a ransom is paid compromises:

The process of granting access to information technology (IT) system resources (including files) only to authorized users is a primary control for:

A firewall is an example of a security control providing:

The comparison of cryptographic file hashes can be used as a control for:

Using cryptographic hashes (especially for passwords) can be used as a control for:

What essential steps are needed to assure confidentiality of data?

Requiring a password to log onto a system is a form of:

Requiring a username to log onto a system is a form of:

While the purpose of password complexity rules is to improve security, which statement describes a concern about the usefulness of this security measure?

A complex system has multiple components in it. System security is a characteristic of a system that has:

True or false? Cybersecurity is a “hard problem” because security is only as strong as the weakest link and is limited to human actors.

True or false? Cybersecurity is a “hard problem” because cyberspace is large, interconnected, and complex.

True or false? Cybersecurity is a “hard problem” because cybersecurity solutions can be inexpensive.

The process of identifying the risks to system security and determining the probability of occurrence, the resulting impact, and the additional safeguards that mitigate this impact is known as:

True or False? Risk an essential aspect of cybersecurity because given the complexity of cybersystems, there are no limits to how much control can be exerted to protect those systems.

True or False? Risk an essential aspect of cybersecurity because risk is needed to understand the likelihood that a threat source will exploit a vulnerability, and the resulting damage if the attack is successful.