Mod 2 Risk Adversity Trust

Front

Which statement describes why information assets must be identified for cybersecurity purposes?

Back

Because you cannot protect what you have not identified

Front

Which statement describes the purpose of a data classification system for cybersecurity? Options: To ensure filenames are compliant with the naming policy rules, To identify information assets and protect them from a loss of confidentiality, integrity and availability, To describe all possible vulnerabilities in the system, To initiate a threat assessment protocol

Back

To identify information assets and protect them from a loss of confidentiality, integrity and availability

Front

Inappropriate file access to, or disclosure of, protectively marked information, whether by an adversary or accidentally, is a loss of: Availability, Confidentiality, Integrity, Availability and Confidentiality

Back

Confidentiality

Front

User error resulting in the access to, modification of, and disclosure confidential information assets represents a loss of:

Back

Confidentiality and Integrity

Front

What is the term used to describe ensuring that authorized parties are able to access the information when it is needed?

Back

Availability

Front

Which term refers to a circumstance or event with the potential to have an adverse effect on organizational operations?

Back

Threat

Front

Which term refers to a weakness in an information system, system security procedures, internal controls, or implementation?

Back

Vulnerability

Front

Which term refers to an attempt that exploits a weakness and compromises system integrity, availability, or confidentiality?

Back

Attack

Front

Fire, flood, or an adverse weather event impacting the security of information assets is known as a:

Back

Threat

Front

A software bug that can cause a buffer overflow in a computer program resulting in a loss of confidentiality, integrity, or availability is known as a:

Back

Vulnerability