Quiz 1 CYB 155

_________ is a network project that preceded the Internet.

ARPANET

An information system is the entire set of __________, people, procedures, and networks that enable the use of information resources in the organization.

All of the above

Which of the following is a valid type of role when it comes to data ownership?

All of the above

An organizational resource that is being protected is sometimes logical, such as a Web site, software information, or data. Sometimes the resource is physical, such as a person, computer system, hardware, or other tangible object. Either way, the resource is known as a(n) ___________.

Asset

__________ of information is the quality or state of being genuine or original.

Authenticity

The ____ is the individual primarily responsible for the assessment, management, and implementation of information security in the organization.

CISO

The protection of all communications media, technology, and content is known as ___________.

Communication Security

An emerging methodology to integrate the effort of the development team and the operations team to improve the functionality and security of applications is known as __________.

DevOps

A server would experience a(n) __________ attack when a hacker compromises it to acquire information via a remote location using a network connection.

Direct

A technique used to compromise a system is known as a(n)

Exploit

A champion is a project manager, who may be a departmental line manager or staff unit manager, and has expertise in project management and information security technical requirements.

False

A(n) hardware system is the entire set of people, procedures, and technology that enable business to use information.

False

Information security can be an absolute.

False

The bottom-up approach to information security has a higher probability of success than the top-down approach.

False

The implementation phase is the longest and most expensive phase of the systems development life cycle (SDLC).

False

The possession of information is the quality or state of having value for some purpose or end.

False

The water-ski model is a type of SDLC in which each phase of the process flows from the information gained in the previous phase, with multiple opportunities to return to previous phases and make adjustments.

False

In file hashing, a file is read by a special algorithm that uses the value of the bits in the file to compute a single number called the __________ value.

Hash value

The protection of the confidentiality, integrity, and availability of information assets, whether in storage, processing, or transmission, via the application of policy, education, training and awareness, and technology is known as ___________.

Information Security

was the first operating system to integrate security as one of its core functions.

MULTICS

__________ security addresses the issues necessary to protect the tangible items, objects, or areas of an organization from unauthorized access and misuse.

Physical

During the __________ phase, specific technologies are selected to support the alternatives identified and evaluated in the prior phases.

Physical Design

The protection of tangible items, objects, or areas from unauthorized access and misuse is known as ___________.

Physical Security

People with the primary responsibility for administering the systems that house the information used by the organization perform the role of ____.

System Administrators

A breach of possession may not always result in a breach of confidentiality.

True

During the early years of computing, the primary threats to security were physical theft of equipment, espionage against the products of the systems, and sabotage.

True

Of the two approaches to information security implementation, the top-down approach has a higher probability of success.

True

To achieve balance—that is, to operate an information system that satisfies the user and the security professional—the security level must allow reasonable access, yet protect against threats.

True

When unauthorized individuals or systems can view information, confidentiality is breached. _________________________

True

A subject or object's ability to use, manipulate, modify, or affect another subject or object is known as ___________.

access

Hardware is often the most valuable asset possessed by an organization, and it is the main target of intentional attacks.

false

SecOps focuses on integrating the need for the development team to provide iterative andrapid improvements to system functionality and the need for the operations team to improvesecurity and minimize the disruption from software release cycles.

false

The Analysis phase of the SDLC examines the event or plan that initiates the process and specifies the objectives, constraints, and scope of the project. _________________________

false

A data custodian works directly with data owners and is responsible for the storage, maintenance, and protection of the information.

true

Confidentiality ensures that only those with the rights and privileges to access information are able to do so. _________________________

true

In the physical design phase, specific technologies are selected.

true

Information security can begin as a grassroots effort in which systems administrators attempt to improve the security of their systems, often referred to as the bottom-up approach.

true

The value of information comes from the characteristics it possesses.

true

A type of SDLC in which each phase has results that flow into the next phase is called the __________ model.

waterfall