Itsy 2342 Incident Response And Handling Test 1

Front 1

What are the three security concepts represented by the C.I.A triangle?

Back 1

Confidentiality, Integrity and Availability

Front 2

_____ means that only those with the rights and privileges to access information are able to do so.

Back 2

Confidentiality

Front 3

_____ is when information is whole, complete and uncorrupted.

Back 3

Integrity

Front 4

_____ means that authorized users-persons or computer systems-are able to access information without interference or obstruction, and to receive it in the required format.

Back 4

Availability

Front 5

A category of objects, persons, or other entities that pose a potential risk of loss to an asset
Asset: an organizational resource that is being protected

Back 5

Threat

Front 6

An _____ can be logical, such as a Web site, information, or data; or it can be physical, such as a person, computer system, or other tangible object.

Back 6

Asset

Front 7

A _____ is a weakness or fault in the protection mechanisms that are intended to protect information and information assets from attack or damage.

Back 7

Vulnerability

Front 8

_____ is the process of identifying vulnerabilities in an organization's information systems and taking carefully reasoned steps to ensure the confidentiality, integrity, and availability of all components in the organization's information system.

Back 8

Risk Management

Front 9

Eliminate or reduce the remaining uncontrolled risks.

Back 9

Avoidance strategy

Front 10

Transfer the risk to other areas or to outside entities.

Back 10

Transference strategy

Front 11

Reduce the impact should the vulnerability be exploited.

Back 11

Mitigation strategy

Front 12

Understand the consequences and accept the risk without control or mitigation.

Back 12

Acceptance strategy

Front 13

Application of policy is a method of risk _____.

Back 13

Avoidance

Front 14

Training and Education are methods of risk ______.

Back 14

Avoidance

Front 15

Application of technology is a method of risk ______.

Back 15

Avoidance

Front 16

Rethink how services are offered is a method of risk _____.

Back 16

Transference

Front 17

Revise deployment models is a method of risk _____.

Back 17

Transference

Front 18

Outsource to other organizations is a method of risk _____.

Back 18

Transference

Front 19

Purchase insurance is a method of risk _____.

Back 19

Transference

Front 20

Implement service contracts with providers is a method of risk _____.

Back 20

Transference

Front 21

Contingency Planning is a method of risk _____.

Back 21

Mitigation

Front 22

Business impact analysis is a method of risk _____.

Back 22

Mitigation

Front 23

Incident response plan is a method of risk _____.

Back 23

Mitigation

Front 24

Disaster recovery plan is a method of risk _____.

Back 24

Mitigation

Front 25

Business continuity plan is a method of risk _____.

Back 25

Mitigation

Front 26

The choice to do nothing to protect a vulnerability and to accept the outcome of its exploitation is a method of risk _____.

Back 26

Acceptance

Front 27

The four subordinate functions of a contingency plan are _____ _____ assesment, Incident response planning, Disaster recovery planning, and Business continuity planning

Back 27

Business impact

Front 28

The four subordinate functions of a contingency plan are Business impact assessment, _____ _____ planning, Disaster recovery planning, and Business continuity planning

Back 28

Incident response

Front 29

The four subordinate functions of a contingency plan are Business impact assessment, Incident response planning, _____ _____ planning, and Business continuity planning

Back 29

Disaster recovery

Front 30

The four subordinate functions of a contingency plan are Business impact assessment, Incident response planning, Disaster recovery planning, and _____ _____ planning.

Back 30

Business continuity

Front 31

A plan or course of action used to convey instructions from senior management to those who make decisions, take actions, and perform duties

Back 31

Policy

Front 32

An organizational law that dictates acceptable and unacceptable behavior, and defines penalties for violations

Back 32

Policy

Front 33

Detailed statement of what must be done to comply with policy

Back 33

Standard

Front 34

Informal standard is also known as a _____.

Back 34

De facto standard

Front 35

A formal standard is also known as _____.

Back 35

De jure standard

Front 36

_____, procedures, and guidelines effectively explain how to comply with policy.

Back 36

Practices

Front 37

Practices, _____, and guidelines effectively explain how to comply with policy.

Back 37

procedures

Front 38

Practices, procedures, and _____ effectively explain how to comply with policy.

Back 38

guidelines

Front 39

Effectively explain how to comply with policy.

Back 39

Practices, procedures, and guidelines

Front 40

Accidental deletion of user desktop data or files by member of organization (accidental user data deletion)

Back 40

Act of human error or failure

Front 41

Accidental deletion of server data or files by member of organization (accidental server data deletion)

Back 41

Act of human error or failure

Front 42

Accidental release of critical information by member of organization, including due to social engineering efforts (accidental leak)

Back 42

Act of human error or failure

Front 43

Accidental error or failure to follow procedure in creating software or hardware vulnerabilities.

Back 43

Act of human error or failure

Front 44

Accidental modification or deletion of data due to failure to follow policies or procedures.

Back 44

Act of human error or failure

Front 45

Installation of unauthorized software

Back 45

Act of human error or failure

Front 46

Improper configuration of software or hardware

Back 46

Act of human error or failure

Front 47

Unauthorized installation of software in violation of its licensing (piracy)

Back 47

Compromise to intellectual property

Front 48

Release of organizational information performed outside the bounds of policy, sometimes classified as a "leak".

Back 48

Compromise to intellectual property

Front 49

Violation of fair use of copyrighted material (plagiarism).

Back 49

Compromise to intellectual property

Front 50

Unauthorized logical access to organizational information or systems (hacker probe).

Back 50

Deliberate acts of trespass

Front 51

Unauthorized physical access to organizational facilities (trespasser)

Back 51

Deliberate acts of trespass

Front 52

Blackmail of organization for information assets (electronic extortionist)

Back 52

Deliberate acts of Information extortion

Front 53

Intentional and unauthorized modification or destruction of organizational information assets (electronic vandal)

Back 53

Deliberate acts of sabotage or vandalism

Front 54

Physical damage or destruction of organizational assets (physical vandal)

Back 54

Deliberate acts of sabotage or vandalism

Front 55

Illegal "taking" or organizational assets

Back 55

Deliberate acts of theft

Front 56

E-mail viruses and worms, other viruses and worms

Back 56

Deliberate software attacks

Front 57

E-mail based social engineering (phishing)

Back 57

Deliberate software attacks

Front 58

Web based malicious script

Back 58

Deliberate software attacks

Front 59

Denial of service attacks on organizational information assets

Back 59

Deliberate software attacks

Front 60

Distributed denial of service attacks on organizational information assets

Back 60

Deliberate software attacks

Front 61

Fire

Back 61

Forces of nature

Front 62

Flood

Back 62

Forces of nature

Front 63

Earthquake

Back 63

Forces of nature

Front 64

Lightning

Back 64

Forces of nature

Front 65

Landslide or mudslide

Back 65

Forces of nature

Front 66

Tornado or severe windstorm

Back 66

Forces of nature

Front 67

Hurricane or typhoon

Back 67

Forces of nature

Front 68

Tsunami

Back 68

Forces of nature

Front 69

Electrostatic discharge (ESD)

Back 69

Forces of nature

Front 70

Dust contamination

Back 70

Forces of nature

Front 71

Solar flare

Back 71

Forces of nature

Front 72

Electromagnetic radiation

Back 72

Forces of nature

Front 73

Humidity

Back 73

Forces of nature

Front 74

Network connection outage due to cable severance ( phone or ISP)

Back 74

Quality of service deviations from service providers

Front 75

Network connection outage due to service faults (phone or ISP)

Back 75

Quality of service deviations from service providers

Front 76

Power blackout

Back 76

Quality of service deviations from service providers

Front 77

Power brownout

Back 77

Quality of service deviations from service providers

Front 78

Power surge

Back 78

Quality of service deviations from service providers

Front 79

Power spike

Back 79

Quality of service deviations from service providers

Front 80

Power fault

Back 80

Quality of service deviations from service providers

Front 81

Power sag

Back 81

Quality of service deviations from service providers

Front 82

Other issues (for example, water, sewage, garbage, and other utilities)

Back 82

Quality of service deviations from service providers

Front 83

Equipment failure due to manufacturer or designer faults or defects (for example, HD crash)

Back 83

Technical hardware failures or errors

Front 84

Software failure due to manufacturer or designer faults or defects (for example, bugs or code problems)

Back 84

Technical software failures or errors

Front 85

Unknown software access bypasses (loopholes and trapdoors)

Back 85

Technical software failures or errors

Front 86

Use of antiquated or outdated technologies

Back 86

Technological obsolescence

Front 87

Failure to maintain or update antiquated or outdated equipment-based data storage.

Back 87

Technological obsolescence