Name: ____________________________

1. List (do not explain) the three sides of the traditional C.I.A triangle in information security.
Confidentiality, Integrity, Availability

2. Explain what is meant by Confidentiality in the context of security.
Limiting information access and disclosure to authorized users.

3. Explain what is meant by the term Integrity in the context of security. The trustworthiness of information sources.

4. Explain what is meant by Authenticity in the context of security
Both parties validating their identities.

5. List the components of an Information System
Software, Hardware, Data, Networks, People.

6. Explain the basic conflict between Access to Information and Securing Information, and why it is not necessarily a good idea to have the same person be the Network Administrator and also the Security Administrator.
The security system must provide reasonable access, but also protect against threats. This sometimes leads to the needs of users being looked over in favor of greater protection.
It is better to have separate admins due to the fact that each admin can focus solely on his appointed task and be better schooled in their particular field.

7. Explain why it is critical that programmers consider security when writing programs.
Because software bugs are potential security risks, creating backdoors that can bypass security that is in place.

8. Explain the differences between Computer Security, Network Security and Information Security.
Computer security – protect physical locations, hardware and software
Network security – protect networking components, connections and contents
Information security – protection of the C.I.A triangle

9. You have received a document as an email message. The header indicates that the sender is a friend of yours. The content of the