O GoConqr está de visual novo! Conte para nós o que você achou.

Registre-se grátis

Flashcards

Sem título

sd xx Inglês 104 flashcards

Flashcards do conjunto (104)

  1. 1(T / F) Information should be considered a balance between protection and availability.True
  2. 2(T / F) Information security must be managed similar to any major system implemented in an organization using a methodology like SecSDLC.True
  3. 3(T / F) Implementation of information assurance often described as a combination of art and science.True
  4. 4(T / F) Information security is a “well-informed sense of assurance that the information risk and controls are in balance”.True
  5. 5(T / F) Information assurance began immediately after first mainframes were developed.True
  6. 6(T / F) Successful organizations have multiple layers of security in place: physical, personal, operations, network.True
  7. 7Group of individuals united by similar interest/values in an organization.Communities of interest
  8. 8Responsible for the security and use of a particular set of information.Data owner
  9. 9Responsible for storage, maintenance, and protection of information.Data custodian
  10. 10End users who work with information to perform their daily jobs supporting the mission of the organization.Data users
  11. 11Primarily responsible for advising senior executives on strategic planning.CIO
  12. 12Primarily responsible for assessment, management, and implementation of IS in the organization.CISO
  13. 13Stage where personnel issues evaluated, specific training and education programs conducted.Implementation
  14. 14Stage where constant changing threats and constant monitoring, testing updating and implementing change.Maintenance and Change
  15. 15Continuity planning, Incident response, Disaster recovery and feasibility analysis to determine whether project should continue or be outsourced.Logical design
  16. 16Stage where needed security technology is evaluated, alternatives generated, and final design selected.Physical design
  17. 17Stage where it entifies process, outcomes, goals, and constraints of the project and it begins with enterprise information security policy.Investigation
  18. 18stage where existing security policies, legal issues and perform risk analysis.Analysis
  19. 19Is a coherent program rather than a series of random, seemingly unconnected actions.Sec SDLC
  20. 20Is a formal approach to problem-solving based on structured sequence of procedures.Methodology
  21. 21Initiated by upper management where issue policy, procedures and processes and dictate goals and expected outcomes of project.Top-down approach
  22. 22Systems administrators attempt to improve security of their systems and technical expertise of individual administrators.Bottom-up approach
  23. 23Often most valuable asset and main target of intentional attacks.Data
  24. 24Social engineering and must be well trained and informed.People
  25. 25Entire set of software, hardware, data, people, procedures, and networks necessary to use information as a resource in the organization.Information system
  26. 26Disclosure or exposure to unauthorized individuals or system is prevented.Confidentiality
  27. 27Quality or state of being genuine, i.e., sender of an email.Authenticity
  28. 28The protection of information and is critical elements, including systems and hardware that use, store, and transmit that information.Information security
  29. 29The quality or state of being secure - to be free from danger.Security
  30. 30(T / F) Data should be considered a balance between protection and availability.True
  31. 31Application error occurs when more data is sent to a buffer than it can handle.Buffer overflow
  32. 32Considered as the weakest link among the components in information security.People
  33. 33The process of using social skills to convince people to reveal access credentials or other valuable information to the attacker.Phishing
  34. 34Technique used to gain unauthorized access whereby the intruder sends messages to a computer with an IP address indicating that the message is coming from a trusted host.Spoofing
  35. 35Unsolicited commercial e-mail - while many consider spam a nuisance rather than an attack, it is emerging as a vector for some attacks.Spam
  36. 36This kind of attack includes the execution of viruses, worms, Trojan horses, and active web scripts with the intent to destroy or steal information.Virus
  37. 37An _____ is the deliberate act that exploits vulnerability.Attack
  38. 38Forces of nature, _____ or acts of God are dangerous because they are unexpected and can occur with very little warning.Force majeure
  39. 39The ownership of ideas and control over the tangible or virtual representation of those ideas.Intellectual property
  40. 40Disguise themselves as useful computer programs or applications and can install a backdoor or rootkit on a computer.Trojan programs
  41. 41A computer program that replicates and propagates itself without having to attach itself to a host.Worm
  42. 42An attacker or formerly trusted insider stealing information from a computer system and demanding compensation for its return or non-use.Information extortion
  43. 43____ are greatest threats to information security – They are closest to the organizational data.Employees
  44. 44(T / F) The history of Information Security began after the Personal Computer were developed.False
  45. 45(T / F) One example of Operational security is the provision of initiating a good user name and password of one account.False
  46. 46(T / F) The instrument that protects the information and its critical elements includes system, hardware, people and data.True
  47. 47(T / F) One of the characteristics of information Security which is confidentiality refers to the exposure and disclosure to unauthorized users.True
  48. 48(T / F) Security should be considered balance between availability and security of data and procedures.True
  49. 49(T / F) It obtaining security, the process must pass through testing and evaluating, it is not absolute.False
  50. 50(T / F) Disaster recovery is part of the Analysis Phase of Sec SDLCFalse
  51. 51(T / F) Implementation phase assures the efficiency and effectivity of the system once deployed.True
  52. 52(T / F) Constant monitoring, testing and updating of system is regularly done in Logical Phase of Sec SDLC.False
  53. 53(T / F) Risk analysis and evaluation has been done in Investigation phase of SDLC.False
  54. 54(T / F) Information security is a “well-informed sense of assurance that the information risks and controls are in balance”.True
  55. 55An __ plan is documentation of a firm’s plan and systems put in place to protect personal information and sensitive company data.Information Security
  56. 56Primarily responsible for advising senior executives on strategic planning.CIO
  57. 57According to statistics, the highest ground of IS vulnerabilities belongs toRisk reduction
  58. 58(T / F) SecSDLC is responsible for ensuring the firm follows the policy and procedures around the information security plan.False
  59. 59Lay the groundwork for successful improvement framework.Planning
  60. 60Prepare, react, and recover from circumstances that threaten the organization.Contingency planning
  61. 61Once Security Maintenance is implemented, it must be Operated Properly managed, and __Timely
  62. 62If the program is not adjusting adequately to the changes in the internal or external environment, it may be necessary to begin the __ again.cycle
  63. 63It is doing the work according to the plan based on IS governance.Acting
  64. 64Design and implementation of specific controls to counter those threats and manage __ posed to the organization.risks
  65. 65Method of implementation can be top-down or __Bottom-up
  66. 66Design, implementation, maintenance of countermeasures that protect the physical resources of an organization.Physical security
  67. 67(T / F) Information security objectives must be addressed at the highest levels of an organization’s management team and it should be effective and offer sustainable approachTrue
  68. 68Determines whether the organization has the resources and commitment to conduct a successful security analysis and designFeasibility Analysis
  69. 69(T / F) Create an inventory of both hardware and software and identify existing safeguard and controls you have in place as part of your Inventory of Assets.True
  70. 70Security solutions are acquired, tested, implemented, and __ again.Tested
  71. 71(T / F) Changing regulatory and investor landscape information security plans are critical for firms to comply with SEC regulations, due to diligence requests from investors and state laws.True
  72. 72(T / F) Your firm must first perform a regulatory view, as all businesses have requirement coming from oversight bodies in managing Security Information System.True
  73. 73The Information Security plan can mitigate threats against your organization, as well as help your firm protect the integrity, confidentiality, and availability of your ___data
  74. 74(T / F) Personnel issues are evaluated and specific training and education programs conducted.True
  75. 75Strategy is the basis for __ direction.Long-term
  76. 76(T / F) Information Security Planning involves the participation of management, stakeholders, and employees only.False
  77. 77(T / F) Information security protects the organization’s ability to investigate scenario.False
  78. 78(T / F) Information security safeguards the technology data they used in the organization.False
  79. 79Communities of interest must argue for information security in terms of impact and __Cost
  80. 80(T / F) Organization needs environments that safeguard assets and liabilities.False
  81. 81One of the most valuable assets is __data
  82. 82(T / F) Accidents and employee mistakes are an example of acts of human error or failure.True
  83. 83(T / F) Fire, flood, and earthquake are considered as example of Force Majeure.True
  84. 84(T / F) Equipment failure is an example of Technical software failure.False
  85. 85(T / F) Outdated technology is synonymous to Technological obsolescesTrue
  86. 86Employees are greatest __ to information security.threat
  87. 87__ of internet service can lead to considerable loss in the availability of information.Loss
  88. 88Prolonged drop of power irregularities.Brownout
  89. 89Momentarily loss of voltage.Sag
  90. 90Unauthorized accessing of information or shoulder surfing are an example of ___Espionage
  91. 91An attacker who steals information from computer system demanding for compensation for its return.Information extortion
  92. 92Deliberately sabotaging the operations of computed system or business.Sabotage
  93. 93It can replicate itself, usually thru an executable program attached to an email.virus
  94. 94Computer programs that replicates and propagates itself without having to attach itself to a host.Worm
  95. 95Disguise themselves as useful computer programs and can install a backdoor or rootkit on a computer.Trojan horse
  96. 96Display advertisements to slow down the computer it’s running on.adware
  97. 97The ownership of ideas and control over the tangible or virtual representation of those ideas.intellectual property
  98. 98Error occurs when manufacturer distributes to users’ equipment containing flaws.Hardware failure
  99. 99Management must recognize that when technology becomes outdated, there is a risk of loss of data integrity to threats andAttack
  100. 100Deliverate act that exploits vulnerability.Attack
  101. 101A technique to compromise a system.Exploit
  102. 102An identified weakness of a controlled system whose control are not present or no longer effective.Vulnerability
  103. 103This attack includes viruses, worms, trojan horses, web attack that intent to destroy informationMalicious code
  104. 104Sending email infections to address found in address book.Mass mail

Informações

Descrição
FlashCards sobre Sem título, criado por sd xx em 14-03-2023.
Criado por
sd xx
Visualizações
2
Avaliação

Fale Conosco

Sobre o que é sua mensagem?

O que você acha do novo visual?

Você gostou?