cis 410 exam 1 study guide cards (Cyber Safe) Exam Questions with Latest Update

Vulnerability - ANSWER-Flaw or weakness in a system's design, implementation, or operation and management that could be exploited to violate the system's security policy Categories of vulnerabilities - ANSWER-leaky (loss of confidentiality) corrupted (loss of integrity) unavailable (loss of availability) Threat - ANSWER-A potential for violation of security, which exists when there is a circumstance, capability, action, or event that could breach security and cause harm A category of objects, persons, or other entities that presents a danger to an asset Risk - ANSWER-An expectation of loss expressed as the probability that a particular threat will exploit a particular vulnerability with a particular harmful result. Risk = Threat x Vulnerability Asset - ANSWER-The organizational resource that is being protected Logical: Information, data Physical: People, computer systems, or tangible objects Attack - ANSWER-An assault on system security that derives from an intelligent threat A deliberate attempt to evade security services and violate security policy of a system Types of attacks - ANSWER-Passive - does not affect system resources Active - attempt to alter system resources or affect their operation Origin of attacks - ANSWER-Insider - initiated by an entity inside the security perimeter Outsider - initiated from outside the perimeter Countermeasure - ANSWER-An action, device, procedure, or technique that reduces a threat, a vulnerability, or an attack by eliminating or preventing it, by minimizing the