INMT 441 Exam 1 Questions and Answers Fully Solved

INMT 441 Exam 1 Questions and Answers Fully Solved Module 1 Every journey begins with a single step. Cyber The online world Security Being free from danger Cybersecurity is the prevention of damage to, protection of, and restoration of computers and electronic communication systems, including information contained therein, to ensure their availability, integrity, authentication, confidentiality, and non-repudiation. Another simpler definition for Cyber Security Protection of computer asset from unauthorized access, use, alteration, and destruction Threat A potential risk to an information asset Vulnerability A potential weakness in an asset or its defensive control system. Attack An ongoing act, intentional or unintentional, against the asset that could result in a loss. An example is social engineering Exploit A technique used to compromise a system Threat agents attempt to exploit systems for their personal gain "Thats f*cking illegal" - Dana White Security Measure an action, device, procedure, or technique that reduces a threat, a vulnerability, or an attack by eliminating or preventing it, by minimizing the harm it can cause, or by discovering and reporting it so that corrective action can be taken. Why is Cyber security Important? 1. Cybersecurity incidents interrupt normal businesses 2. Reputation Damages (Customers want their info private and secured) 3. Lawsuits and Compensations (Customers might sue) 4. Legal Requirements (Noncompliance leads to fines) Three parts of CIA Triad Confidentiality, Integrity, Availability Confidentiality Protecting data from unauthorized access Integrity Preventing unauthorized manipulations of data and systems. Availability Ensuring that legitimate users can access the system Other objectives of CIA Triad Non-repudiation and Accountability Non-Repudiation The ability to assure that an action cannot be denied; being able to prove that someone did something An example is a sender is provided with proof of delivery and the recipient is provided with proof of sender's identity - so neither can later deny Accountability Ensuring that actions can be traced to individuals Confidentiality Information is protected from disclosure or exposure to unauthorized individuals or systems Example of Confidentiality Least Privilege Least Privilege Limiting access to information only to those who need it, and preventing access by those who do not Other security measures to enhance confidentiality 1. Information Classification - public, internal, private 2. Encryption 3. Use Policies 4. Employee Training Integrity - Data Accuracy Information is whole, complete, and uncorrupted When is integrity of information threatened When exposed to corruption, damage, and destruction When can corruption of information occur When being entered, processed, stored, or transmitted An example of data being compromised when processed When a transaction occurs and the total is incorrect. Entering, processing, and storing information is part of what cycle The Information Process Cycle