Exam 1: Introduction to Information Security

The investigation phase of the SDLC involves specification of the objectives, constraints, andscope of the project.

E-mail spoofing involves sending an e-mail message with a harmful attachment.

During the ____________________ War, many mainframes were brought online to accomplish more complex and sophisticated tasks, so it became necessary to enable the mainframes to communicate via a less cumbersome process than mailing magnetic tapes between computer centers.

In the ____________________ approach, the project is initiated by upper-level managers who issue policy, procedures, and processes, dictate the goals and expected outcomes, and determine accountability for each required action.

A computer is the ____________________ of an attack when it is the entity being targeted.

The CNSS model of information security evolved from a concept developed by the computer security industry known as the ____________________ triad.

When a computer is the subject of an attack, it is the entity being attacked.

A breach of possession may not always result in a breach of confidentiality.

In an organization, the value of ____________________ of information is especially high when it involves personal information about employees, customers, or patients.

__________ was the first operating system to integrate security as one of its core functions.

An information system is the entire set of __________, people, procedures, and networks that enable the use of information resources in the organization.

The implementation phase is the longest and most expensive phase of the systems development life cycle (SDLC).

The physical design is the blueprint for the desired solution.

The possession of information is the quality or state of having value for some purpose or end.

Information security can be an absolute.

Information security can begin as a grassroots effort in which systems administrators attempt to improve the security of their systems, often referred to as the bottom-up approach. _________________________

Which of the following phases is often considered the longest and most expensive phase of the systems development life cycle  

The ____________________ phase consists primarily of assessments of the organization, its current systems, and its capability to support the proposed systems.

When unauthorized individuals or systems can view information, confidentiality is breached. _________________________

During the early years, information security was a straightforward process composed predominantly of ____________________ security and simple document classification schemes.