Chapter 1: Introduction to Information Security

TRUE/FALSE

1. An indirect attack involves a hacker using a personal computer to break into a system.

ANS: F PTS: 1 REF: 3

2. The value of information comes from the characteristics it possesses.

ANS: T PTS: 1 REF: 6

3. By balancing information security and access, a completely secure information system can be created.

ANS: F PTS: 1 REF: 8

4. The security blueprint is a detailed version of the security framework.

ANS: T PTS: 1 REF: 25

5. One of the basic tenets of security architectures is the spheres of security.

ANS: F PTS: 1 REF: 30

MULTIPLE CHOICE

1. Which term describes a subject or object’s ability to use, manipulate, modify, or affect another subject or object?
a.|Attack|c.|Exploit|
b.|Possession|d.|Access|

ANS: D PTS: 1 REF: 3

2. Which resource is a physical asset?
a.|Web site|c.|Data|
b.|Computer system|d.|Information|

ANS: B PTS: 1 REF: 3

3. In information security, ____ exists when a vulnerability known to an attacker is present.
a.|threat|c.|risk|
b.|loss|d.|exposure|

ANS: D PTS: 1 REF: 4

4. Which term identifies a single instance of an information asset suffering damage, unintended or unauthorized modification, or disclosure?
a.|Exploit|c.|Vulnerability|
b.|Exposure|d.|Loss|

ANS: D PTS: 1 REF: 5

5. Organizations must minimize ____ to match their risk appetite.
a.|threats|c.|risk|
b.|access|d.|loss|

ANS: C PTS: 1 REF: 5

6. An unlocked door is an example of a(n) ____.
a.|vulnerability|c.|risk|
b.|threat|d.|exploit|

ANS: A PTS: 1 REF: 5-6

7. The CIA triad is based on three characteristics of information that form the foundation for many security programs: ____.
a.|confidentiality, integrity, and asset|
b.|confidentiality, integrity, and availability|
c.|confidentiality, information, and