Exam 1: Introduction to Information Security

The __________ design phase of an SDLC methodology is implementation independent, meaning that it contains no reference to specific technologies, vendors, or products.

The Security Development Life Cycle (SDLC) is a general methodology for the design and implementation of an information system. _________________________

According to the CNSS, networking is "the protection of information and its critical elements." _________________________

MULTICS stands forMultiple Information and Computing Service. _________________________

A frequently overlooked component of an information system, ____________________ are the written instructions for accomplishing a specific task.

Hardware is the physical technology that houses and executes the software, stores and transports the data, and provides interfaces for the entry and removal of information from the system. _________________________

Network security focuses on the protection of physical items, objects, or areas from unauthorized access and misuse.

A technique used to compromise a system is known as a(n) ___________.

The history of information security begins with the concept of ____________________ security.

The protection of tangible items, objects, or areas from unauthorized access and misuse is known as ___________.

​The protection of all communications media, technology, and content is known as ___________.

The Internet brought ____________________ to virtually all computers that could reach a phone line or an Internet-connected local area network.

In the physical design phase, specific technologies are selected.

The bottom-up approach to information security has a higher probability of success than the top-down approach.

____________________ of information is the quality or state of being genuine or original, rather than a reproduction or fabrication.

__________ of information is the quality or state of being genuine or original.

The value of information comes from the characteristics it possesses.

__________ has become a widely accepted evaluation standard for training and education related to the security of information systems.

A server would experience a(n) __________ attack when a hacker compromises it to acquire information via a remote location using a network connection.

List and describe the phases of the traditional systems development life cycle.