Exam 1: Introduction to Information Security

An organizational resource that is being protected is sometimes logical, such as a Web site, software information, or data. Sometimes the resource is physical, such as a person, computer system, hardware, or other tangible object. Either way, the resource is known as a(n) ___________.

MULTICS stands for Multiple Information and Computing Service. _________________________

A server would experience a(n) __________ attack when a hacker compromises it to acquire information via a remote location using a network connection.

The ____________________ phase consists primarily of assessments of the organization, its current systems, and its capability to support the proposed systems.

____________________ of information is the quality or state of being genuine or original, rather than a reproduction or fabrication.

Organizations are moving toward more __________-focused development approaches, seeking to improve not only the functionality of the systems they have in place, but consumer confidence in their product.

The water-ski model is a type of SDLC in which each phase of the process flows from the information gained in the previous phase, with multiple opportunities to return to previous phases and make adjustments.

A methodology and formal development strategy for the design and implementation of an information system is referred to as a __________.

A(n) ____________________ is a group of individuals who are united by similar interests or values within an organization and who share a common goal of helping the organization to meet its objectives.

The value of information comes from the characteristics it possesses.

When unauthorized individuals or systems can view information, confidentiality is breached. _________________________

An information system is the entire set of __________, people, procedures, and networks that enable the use of information resources in the organization.

The bottom-up approach to information security has a higher probability of success than the top-down approach.

A computer is the ____________________ of an attack when it is the entity being targeted.

The ____________________ of information is the quality or state of ownership or control of some object or item.

During the early years, information security was a straightforward process composed predominantly of ____________________ security and simple document classification schemes.

Information security can be an absolute.

The possession of information is the quality or state of having value for some purpose or end.

__________ of information is the quality or state of being genuine or original.

The history of information security begins with the concept of ____________________ security.