Exam 1: Introduction to Information Security

The ____ would typically NOT be a member of the security project team.

____ refers to multiple layers of security controls and safeguards is called.

Acceptance is a viable solution only if the organization has evaluated the risk and determined that the implementation of additional controls or strategies is not justified, due to cost or other organizational issues.

____ means that information is free from mistakes or errors.

A(n) ____ attack is when a system is compromised and used to attack other systems.

An organization will often create a network security ____________________, which defines the boundary between the outer limit of an organization's security and the beginning of the outside network.

A virus that is embedded in the automatically executing scipts commonly found in word processors, spreadsheets, and database applications is called a ____.

A(n) ____ is a category of object, person, or other entity that poses a potential risk of loss to an asset.

End users are ____.

A ____ is an e-mail attack in which the attacker routes large quantities of e-mail to the target system hoping to overwhelm the target with so much irrelevant email that legitimate email cannot be used.

Brute force attacks are often successful against systems that have adopted the usual security practices recommended by manufacturers.

Attempting to determine a password that is not known to the attacker is often called ____.

A ____ attempts to protect internal systems from outside threats.

Match each item with a statement below. -Responsible for the storage, maintenance, and protection of the information.

The ____ is based on a model developed by the U.S.Committee on National Systems Security (CNSS).

Describe the importance of enabling the safe operation of applications.

In a ____ attack, the attacker sends a large number of connection or information requests to a target in an attempt to overwhelm its capacity and make it unavailable for legitimate users.

The most common Intellectual Property breach is ____________________.

Match each item with a statement below. -Information is protected from disclosure or exposure to unauthorized individuals or systems.

Match each item with a statement below. -Information remains whole, complete, and uncorrupted.