Fundamentals Of Information Security

Front 1

A type of mechanism to link documents and resources across computers?

Back 1

World Wide Web (WWW)

Front 2

The duty of every government that wants to ensure its national security?

Back 2

Cybersecurity

Front 3

A list of rules and methods for communicating?

Back 3

Protocol

Front 4

Is the likelihood that something bad will happen to an asset.

Back 4

Risk

Front 5

Is any action that could damage an asset?

Back 5

Threat

Front 6

Gives priorities to the functions an organization needs to keep going?

Back 6

Business Continuity Plan (BCP)

Front 7

Defines how a business gets back on its feet after a major disaster like a fire or hurricane?

Back 7

Disaster Recovery Plan

Front 8

Is a computer program written to cause damage to a system, an application, or data?

Back 8

Virus

Front 9

Is a computer program written to cause a specific action to occur, such as erasing a hard drive

Back 9

Malicious Code or malware

Front 10

Is a weakness that allows a threat to be realized or to have an effect on an asset?

Back 10

Vulnerability

Front 11

Software license agreements between the user and the software vendor that typically contain a warranty disclaimer?

Back 11

End User License Agreement (EULA)

Front 12

Is the collection of activities that protect the information system and the data stored in it. Many U.S. and international laws now require this kind of security assurance?

Back 12

Information System Security

Front 13

Passed in 2002, requires federal civilian agencies to provide security controls over resources that support federal operations?

Back 13

Federal Information Security Management Act (FISMA)

Front 14

Passed in 2002, requires publicly traded companies to submit accurate and reliable financial reporting and requires security controls to protect the confidentiality and integrity of the reporting itself?

Back 14

Sarbanes-Oxley Act (SOX)

Front 15

Requires all types of financial institutions to protect customers’ private financial information?

Back 15

Gramm-Leach-Bliley Act (GLBA)

Front 16

Passed in 1996, requires health care organizations to have security and privacy controls implemented to ensure patient privacy.

Back 16

Health Insurance Portability and Accountability Act (HIPAA)

Front 17

Passed in 2000, requires public schools and public libraries to use an Internet safety policy.

The policy must address the following:

Restricting children’s access to inappropriate matter on the Internet

Ensuring children’s security when using e-mail, chat rooms, and other electronic communications

Restricting hacking and other unlawful activities by children online

Disclosing and distributing personal information about children without permission

Restricting children’s access to harmful materials

Back 17

Children's Internet Protection Act (CIPA)

Front 18

Passed in 1974, protects the private data of students and their school records.

Back 18

Family Education Rights and Privacy Act (FERPA)

Front 19

Tenet of Information Security System that states authorized users can view information?

Back 19

Confidentiality

Front 20

Tenet of Information Security System that states authorized users can change information?

Back 20

Integrity

Front 21

Tenet of Information Security System that states information is accessible by authorized users whenever they request the information.

Back 21

Availability

Front 22

The practice of hiding data and keeping it away from unauthorized users?

Back 22

Cryptography

Front 23

The process of transforming data from cleartext into ciphertext?

Back 23

Encryption

Front 24

Deals with the validity and accuracy of data?

Back 24

Integrity

Front 25

A contract that guarantees a minimum monthly availability of service for wide area network (WAN) and Internet access links?

Back 25

Service Level Agreement

Front 26

The domain that defines the people who access an organization’s information system?

Back 26

User Domain

Front 27

Applied in User Domain. Defines what users are allowed and not allowed to do with organization-owned IT assets?

Back 27

Acceptable Use Policy (AUP)

Front 28

The domain where most users connect to the IT infrastructure?

Back 28

Workstation Domain

Front 29

Is the process of ensuring that controls are in place to handle any known threats?

Back 29

Hardening

Front 30

A collection of computers connected to one another or to a common connection medium?

Back 30

Local Area Network

Front 31

Examines the MAC layer address and makes forwarding decisions based on MAC layer address tables?

Back 31

Layer 2 switch

Front 32

Examines the network layer address and routes packets based on routing protocol path determination decisions, the same as a router?

Back 32

Layer 3 switch

Front 33

A LAN segment in the LAN-to-WAN Domain that acts as a buffer zone for inbound and outbound IP traffic?

Back 33

Demilitarized Zone (DMZ)

Front 34

What type of servers are placed in a DMZ?

Back 34

External servers such as Web servers, proxy servers, and e-mail servers

Front 35

Acts as a middleman between a workstation and the external target?

Back 35

Proxy Servers

Front 36

Can include dedicated Internet access and managed services for customers’ routers and firewalls?

Back 36

WAN Domain

Front 37

Is a dedicated encrypted tunnel from one endpoint to another?

Back 37

Virtual Private Network (VPN)

Front 38

Can be created between a remote workstation using the public Internet and a VPN router or a secure browser?

Back 38

Virtual Private Network (VPN)

Front 39

Is important to have, but dangerous to use because it introduces many risks and threats from the Internet?

Back 39

Remote Access Domain

Front 40

Holds all the mission-critical systems, applications, and data?

Back 40

System/Application Domain

Front 41

Is the weakest link in security?

Back 41

The User

Front 42

A short written statement that the people in charge of an organization have set as a course of action or direction?

Back 42

Policy

Front 43

A detailed written definition for hardware and software and how it is to be used?

Back 43

Standard

Front 44

Are written instructions for how to use policies and standards?

Back 44

Procedures

Front 45

A suggested course of action for using the policy, standards, or procedures?

Back 45

Guidelines

Front 46

A consistent definition for how an organization should handle and secure different types of data?

Back 46

Data Classification Standard