Security: Chapter 1
QUESTIONS AND VERIFIED
CORRECT ANSWERS
GRADED A+ LATEST 100%
GUARANTEED PASS
Steganography - CORRECT ANSWER-Hiding information within something else, such as an image
Ethics Code Canon 1 - CORRECT ANSWER-Protect society, the common good, necessary public
trust and confidence, and the infrastructure
Ethics Code Canon 2 - CORRECT ANSWER-Act honorably, honest, justly, responsibly, and legally
Ethics Code Canon 3 - CORRECT ANSWER-Serve principals diligently and competently
Ethics Code Canon 4 - CORRECT ANSWER-Advance the information security profession
Strong Identification and Authentication methods - CORRECT ANSWER-Help with Accountability
Personally Identifiable Information (PII) - CORRECT ANSWER-Any information that can be traced
back to an individual
, Protected Health Information (PHI) - CORRECT ANSWER-Individually identifiable health records
governed under HIPPA
Generally Accepted Privacy Principals (GAPP) - CORRECT ANSWER-Outlines 10 components of
data privacy including Management, Notice, Choice and Consent, Collection, Use, Retention,
and Disposal, Access, Disclosure to Third Parties, Security, Quality, and Monitoring and
Enforcement
Encryption - CORRECT ANSWER-Uses cryptography to render information unreadable without
the necessary encryption key
Masking - CORRECT ANSWER-Removes portions of sensitive information to reduce its sensitivity
Least Privilege - CORRECT ANSWER-Users are limited to the resources they can use based on
their job role and what is necessary for that
Separation of Duties - CORRECT ANSWER-No individual should process two permissions that in
combination allow them to perform a highly sensitive action
Two-Person Control - CORRECT ANSWER-Requires the authorization of two separate individuals
to carry out a sensitive action; also known as dual control
Two-Person Integrity - CORRECT ANSWER-Two people must enter sensitive areas together
Change Management - CORRECT ANSWER-Ensures that an organization follows a standard
process for requesting, reviewing, approving, and implementing changes to information systems
Request for Change (RFC) - CORRECT ANSWER-Includes Description of the change, Expected
impact, Risk Assessment, Rollback Plan, Identity of those involved, Proposed schedule, and
Affected configuration items