Computer Security Week 1_Evaluation

What is the property that involves the protection of data, providing access for those who are allowed to see it while disallowing others from learning anything about its content?

• Confidentiality

• Authenticity

• Availability

• Integrity

Which tool involves the transformation of information using a secret, called an encryption key, so that the transformed information can only be read using another secret, called the decryption key?

• Access control

• Encryption

• Authorization

• Authentication

What is the property that refers to the ability to determine that statements, policies, and permissions issued by persons or systems are genuine?

• Anonymity

• Authenticity

• Integrity

• Assurance

What is the primary tool for ensuring authenticity in computer systems?

• Mixing

• Digital signatures

• Aggregation

• Proxies

What is the property that involves the ability to determine that certain records or transactions are not attributable to any individual?

• Anonymity

• Availability

• Integrity

• Confidentiality

What is the interception of information intended for someone else during its transmission over a communication channel called?

• Alteration

• Masquerading

• Eavesdropping

• Denial-of-service

Which principle stresses simplicity in the design and implementation of security measures?

• Fail-safe defaults

• Economy of mechanism

• Complete mediation

• Open design

According to the principle of least privilege, each program and user of a computer system should operate with the bare minimum privileges necessary to function properly. What is this principle also known as?

• Principle of separation of privilege

• Principle of least privilege

• Principle of psychological acceptability

• Principle of least common mechanism

What principle states that the default configuration of a system should have a conservative protection scheme?

• Principle of fail-safe defaults

• Principle of economy of mechanism

• Principle of open design

• Principle of separation of privilege

According to the principle of open design, what should rely only on keeping cryptographic keys secret?

• Trust management

• Security architecture and design

• Permissions

• Policies