Review Questions

1. What is the difference between a threat agent and a threat?
A threat agent is a specific component that represents a danger to an organization’s assets. And a threat is an object, person or entity that represents a constant danger. 2. What is the difference between vulnerability and exposure?
Vulnerability is a weakness is a system that leaves the system open to attacks. Exposure is the known vulnerabilities that make a system weak and open to attacks without protection. 3. How is infrastructure protection (assuring the security of utility services) related to information security?
If the infrastructure of a network is exposed and accessible to anyone this leaves the network vulnerable to damage both to hardware and software. The infrastructure must be protected to allow only authorized user to have access to the network. 4. What type of security was dominant in the early years of computing?
Physical security. 5. What are the three components of the C.I.A. triangle? What are they used for?
Confidentiality, Integrity and availability are the three components of the C.I.A triangle. They are used as a standard for computer security. 6. If the C.I.A. triangle is incomplete, why is it so commonly used in security?
The C.I.A triangle provides a basic standard of what is needed to keep information secured. 7. Describe the critical characteristics of information. How are they used in the study of computer security?
Availability ensures that only authorized user have access to information.
Accuracy makes sure that the date it has no errors.
Authenticity ensures that the data is genuine.
Prevents unauthorized user from have access to information.
Integrity ensures that information is not damaged or change by unauthorized user.
Utility ensures that all date with value/purpose gets identifies and protected.