midterm Security Chapter 1
Availability assures that systems works promptly and service is not denied to authorized users. True or False
True
Computer security is protection of the integrity, availability, and confidentiality of information system resources. True or False
True
Data integrity assures that information and programs are changed only in a specified and authorized manner. True or False
True
A loss of ______ is the unauthorized disclosure of information. A. confidentiality B. integrity C. authenticity D. availability
A. Confidentiality
__________ assures that a system performs its intended function in an unimpaired manner, free from deliberate or inadvertent unauthorized manipulation of the system. A. System Integrity B. Data Integrity C. Availability D. Confidentiality
A. System Integrity
A(n) ______________is a threat that is carried out and, if successful, leads to an undesirable violation of security, or threat consequence.
Attack
Confidentiality, Integrity, and Availability form what is often referred to as the ________________.
CIA triad
___________ is the protection afforded to an automated information system in order to attain the applicable objectives of preserving the integrity, availability, and confidentiality of information system resources.
Computer Security
In the United States, student grade information is an asset whose confidentiality is regulated by the ________.
FERPA (Family Educational Rights and Privacy Act)
The "A" in the CIA triad stands for "authenticity". True or False
False
Threats are attacks carried out. True or False
False
A flaw or weakness in a system's design, implementation, or operation and management that could be exploited to violate the system's security policy is a(n) ._______________ A. countermeasure B. vulnerability C. adversary D. risk
B. Vulnerability
____________ assures that individuals control or influence what information related to them may be collected and stored and by whom and to whom that information may be disclosed. A. Availability B. System Integrity C. Privacy D. Data Integrity
C. Privacy
A. ________ level breach of security could be expected to have a severe or catastrophic adverse effect on organizational operations, organizational assets, or individuals. A. low B. normal C. moderate D. high
D. High
A loss of ___________ is the disruption of access to or use of information or an information system.
availability
