Enlisted Information Warfare Specialist Common Core

Front 1

Define Information Assurance

Back 1

IA.

Information Operations that protect and defend data.

Front 2

Define Certification

Back 2

Evaluation of the technical and non-technical

security features of an IS and other safeguards.

Front 3

Define Accreditation

Back 3

Official decision to permit operation of an IS in a specified environment.

Front 4

Define Designated Approving Authority

Back 4

DAA. Accredits the system to operate at an acceptable level of risk.

Front 5

Define System Security Plan

Back 5

Formal document describing the security tasks

required to meet system network security

requirements.

Front 6

Define System Security Authorization Agreement

Back 6

Living document that represents the agreement between the DAA, the Certification Authority,

Program Manager, and the users.

Front 7

Define Approval To Operate

Back 7

ATO. Formal declaration by the DAA that a system is approved to operate with specifics.

Front 8

Define Interim Approval To Operate

Back 8

IATO. Temporary authorization granted by the DAA to process classified material.

Front 9

What are the 5 attributes of Information Assurance

Back 9

1) Confidentiality

2) Integrity

3) Availability

4) Non-repudiation

5) Authentication

Front 10

Define the computer incident - Root Level Intrusion

Back 10

(Incident). Unauthorized privileged access to a DoD system.

**Master Key to a house and everything inside**

Front 11

Define the computer incident - User Level

Intrusion

Back 11

(Incident). Unauthorized non-privileged access to a DoD system.

**after they get into the house**

Front 12

Define the computer incident - Denial of Service

Back 12

(Incident). Activity that denies, degrades, or

disrupts normal system functions.

**flooding the server**

Front 13

Define the computer incident - Malicious Logic

Back 13

(Incident). Instillation of software designed with

malicious intentions.

**embedded code that grants information from the system**

Front 14

Define the computer incident - Unsuccessful

Activity Attempt

Back 14

(Event). Attack that fails due to normal defensive mechanisms.

Front 15

Define the computer incident - Non-Compliance Activity

Back 15

(Event) Activity that potentially exposes DoD

systems to an increased risk

Front 16

Define the computer incident - Reconnaissance

Back 16

(Event) Activity that seeks to gather information that can be useful in formulating an attack.

Front 17

Define the computer incident - Investigating

Back 17

(Event) Events that are suspicious and warrant further review.

Front 18

Define the computer incident - Explained Anomaly

Back 18

(Event) Suspicious events that are determined to be non-malicious activity and don't fit in any other category.

Front 19

Define Information Assurance Vulnerability Alert

Back 19

IAVA. High risk vulnerability alert

Front 20

Define Information Assurance Vulnerability Bulletin

Back 20

IVAB. Medium risk vulnerability bulletin

Front 21

Define Information Assurance Vulnerability

Technical

Back 21

IVAT. Low risk vulnerability advisory

Front 22

Explain the difference between vulnerability and threat

Back 22

Vulnerability - real weakness

Threat - potential weakness