Chapter 1- Security Principles Questions and Answers 2023/2024

Adequate Security - ANSWER-Security commensurate with the risk and the magnitude of harm resulting from the loss, misuse or unauthorized access to or modification of information. Source: OMB Circular A-130 Administrative Controls - ANSWER-Controls implemented through policy and procedures. Examples include access control processes and requiring multiple personnel to conduct a specific operation. Administrative controls in modern environments are often enforced in conjunction with physical and/or technical controls, such as an access-granting policy for new users that requires login and approval by the hiring manager. Artificial Intelligence - ANSWER-The ability of computers and robots to simulate human intelligence and behavior. Asset - ANSWER-Anything of value that is owned by an organization. Assets include both tangible items such as information systems and physical property and intangible assets such as intellectual property. Authentication - ANSWER-Access control process validating that the identity being claimed by a user or entity is known to the system, by comparing one (single factor or SFA) or more (multi-factor authentication or MFA) factors of identification. Authorization - ANSWER-The right or a permission that is granted to a system entity to access a system resource. NIST 800-82 Rev.2 Availability - ANSWER-Ensuring timely and reliable access to and use of information by authorized users. Baseline - ANSWER-A documented, lowest level of security configuration allowed by a standard or organization. Biometric - ANSWER-Biological characteristics of an individual, such as a fingerprint, hand geometry, voice, or iris patterns. Bot - ANSWER-Malicious code that acts like a remotely controlled "robot" for an attacker, with other Trojan and worm capabilities. Classified or Sensitive Information - ANSWER-Information that has been determined to require protection against unauthorized disclosure and is marked to indicate its classified status and classification level when in documentary form.