Reading...
Play button
Play button
Use LEFT and RIGHT arrow keys to navigate between flashcards;
Use UP and DOWN arrow keys to flip the card;
H to show hint;
A reads text to speech;
9 Cards in this Set
- Front
- Back
|
A risk is the likelihood of a threat source taking advantage of a vulnerability to an information system. Risks left over after implementing safeguards is known as:
|
Residual risks.
|
|
|
Copyright provides what form of protection:
|
Protects the right of an author to prevent unauthorized use of his/her works.
|
|
|
As an information systems security professional, what is the highest amount would you recommend to a corporation to invest annually on a countermeasure for protecting their assets valued at $1 million from a potential threat that has an annualized rate of occurrence (ARO) of once every five years and an exposure factor (EF) of 10% :
|
$20,000.00
|
|
|
Which of the following describes the first step in establishing an encrypted session using a Data Encryption Standard (DES) key?
|
Key exchange
|
|
|
In a typical information security program, what is the primary responsibility of information (data) owner?
|
Determine the information sensitivity or classification level.
|
|
|
Which of the following is not a component of “chain of evidenceâ€:
|
Identification of person who left the evidence.
|
|
|
When an employee transfers within an organization …
|
All access permission should be reviewed.
|
|
|
A system security engineer is evaluation methods to store user passwords in an information system, so what may be the best method to store user passwords and meeting the confidentiality security objective?
|
One-way encrypted file
|
|
|
What is the inverse of confidentiality, integrity, and availability (C.I.A.) triad in risk management?
|
disclosure, alteration, destruction
|
