Access is ____________________.

A threat is _________________________.

B) a category of objects, persons, or other entities that represents a danger to an asset

Vulnerability is _____________________________.

D) a weekness or fault in a system or protection mechanism

What are the three components of the C.I.A triangle

A) Integrity, Confidentiality, Availability

In Information Security, accuracy is the quality or state of being genuine or original.

B) False

In Information Security, Integrity is when an information is whole, complete, and uncorrupted.

A) True

Each of the following is a component of an Information System except ________________.

C) analysis

Each of the following is a phase of a Security System Development Life Cycle except _________.

D) management

Which one of the following is NOT an advantage of the bottom-up approach of the implementation of Information Security?

B) Participant support

Which one of the following is NOT an advantage of the top-down approach of the implementation of Information Security

D) Technical expertise

Data custidians are responsible for storage, maintenance, and protection of the information.

A) True

Which one of the following is not a member of an Information Security Project Team?

D) Everybody

A community of interest is a group of individuals who are united by similar interests or values within an organization.

Who has primary responsibility for the assessment, management, and implementation of information security in the organization.

B) CISO

Which one of the following sentence is NOT true?

C) Information security is technology only.

Information Security is an art and science.

A) True

Confidentiality is _____________________.

B) when information is protected from disclosure or exposure to unauthorized individuals or systems.

Operations security is used to protect which of the following?

C) The details of a particular operation or series of activities.

Phishing is when an attacker attempts to obtain personal or financial information using fraudulent means, most often by posing as another individual or organization.

A) True

Availability is the quality or state of ownership or control.

B) False

Of the two approaches to information security implementation, the top-down approach has a higher probability of success.

A) True

Information has redundancy when it is free from mistakes or errors and it has the value that the end user expects.

B) False

In information security, salami theft occurs when an employee steals a few pieces of information at a time, knowing that taking more would be noticed — but eventually the employee gets the whole thing.

A) True

The ____ model consists of 6 general phases.

C) waterfall

Hardware is the physical technology that houses and executes the software, stores and carries the data, and provides interfaces for the entry and removal of information from the system.

A) True

Information security can begin as a grassroots effort in which systems administrators attempt to improve the security of their systems. This is often referred to as a bottom-up approach.

A) True

____ of information is the quality or state of being genuine or original.

A) Authenticity

A computer is the ____ of an attack when it is used to conduct the attack.

A) subject

The primary threats to security during the early years of computers were physical theft of equipment, espionage against the products of the systems, and sabotage.

A) True

In file hashing, a file is read by a special algorithm that uses the value of the bits in the file to compute a single large number called a(n) ____ value.

Which of the following is a valid type of data ownership?

D) All of the above

A methodology increases the probability of success.

A) True

Key end users should be assigned to a developmental team, known as the united application development team.

B) False

Organizations are moving toward more ____-focused development approaches, seeking to improve not only the functionality of the systems they have in place, but the confidence of the consumer in their product.

A) security

Which of the following phases is the longest and most expensive phase of the systems development life cycle?

D) maintenance and change

Information security can be an absolute.

An E-mail virus involves sending an e-mail message with a modified field.

B) False

The value of information comes from the characteristics it possesses.

A) True

A breach of possession always results in a breach of confidentiality.

B) False

____ is the origin of today’s Internet.

B) ARPANET