Chapter 1

Manages daily operations of security technology

• Chief information security officer

• Security manager

• Security administrator

• Security technician

Security is the goal to be free from danger as well as the process that achieves that freedom

• True

• False

The less secure something is, the less convenient it may become to use

• False

• True

The information cannot be “locked up” so tight that

no one can access it

• Integrity

• Availability

• Confidentiality

• Authorization

Only approved individuals are able to access

important information

• Authorization

• Accounting

• Integrity

• Confidentiality

Information and the hardware, software, and communications are protected in three layers. List three layer below

They cannot easily be replaced without a significant investment in expense, time, worker skill, and/or resources

• Asset

• Threat agent

• Threat

• Vulnerability

Attackers who would break into a computer system without permission and then publically disclose vulnerability

• White Hat Hacker

• Black Hat Hacker

• Grey Hat Hacker

• Script Kiddies

Individuals who uncover vulnerabilities do not report it to the software vendor but instead sell them to the highest bidder

• Cybercrimminals

• Script Kiddies

• Black Hat Hacker

• Brokers

Has the advantage of creating a barrier of multiple defenses

that can be coordinated to thwart a variety of attacks.

• Diversity

• Limiting

• Layering

• Obscurity