Exam 2: General Security Concepts

The policies of the Bell-LaPadula model are

Jane is in the finance department.Although she should not be able to modify files or folders from the marketing department,she can,and does.This a problem of ___________.

Which of the following is a security model that addresses integrity?

The database administrator falls ill and is not able to come to work for three weeks.No one else in the company knows how to administer the database server.This is a result of not following which principle?

_______________ security places the emphasis on controlling access to internal computers from external entities.

The policies of the Biba model are

Nonrepudiation means that the person who sends an e-mail will be unable to deny sending the e-mail.

Rumors spread around the office that Mrs.Smith was stealing office supplies as well as talking badly about the senior management.This rumor eventually reached her boss,who then fired her.This is likely a violation of which policy?

_______________ ensures that the data,or the system itself,is available for use when the authorized user wants it.

John,who is in the development group,has admin passwords to both the development group files and the production group files.This might be a violation of which policy?

To ensure that only those individuals who have authority to view a piece of information may do so is called _______________.

The term which refers to the attempt to gain unauthorized access to systems and computers used by a telephone company to operate its telephone network is a _______.

Reducing the number of services to the least number necessary for it to properly perform its functions is an example of which principle?

The formula for the operational model of computer security is Prevention = Protection + (Detection + Response)

Joe sends a scathing e-mail to his boss regarding increased work hours.Joe tries to deny sending the e-mail,but is unable to due to the use of digital signatures.This is an example of ________.

Bob inadvertently disconnects the cable from the company file server.This creates a problem of ________.

Making the effort to compromise a system more costly than the value of accomplishing it is the goal of security.

Gathering seemingly unimportant information and then combining it to discover potentially sensitive information is known as _______________.

Which of the following is a security model that uses transactions as the basis for its rules?

Audit logs,intrusion detection systems,and honeypots are technologies used for detection.