Upgrade to remove ads
Only $35.99/year

Chap 1 - Intro to Security

Terms in this set (39)

INSIDER
A type of threat that can come from employees, contractors and business partners. (ie. a disgruntled employee)
SERIAL SERVER
Connects a remote system through the Internet to local serial ports using TCP/IP.
ACCOUNTING
The ability that provides tracking of events.
GRAMM-LEACH-BLILEY ACT (GLBA)
A law that requires banks and financial institutions to alert customers of their policies and practices in disclosing customer information.
HEALTH INSURANCE PORTABILITY AND ACCOUNTABILITY ACT (HIPAA)
U.S. law designed to guard protected health information and implement policies and procedures to safeguard it.
SECURITY TECHNICIAN
It is considered a entry level position for a person who has the necessary technical skills.
FALSE
(T/F) The demand for certified IT professionals who know how to secure networks and computers is at an all-time low.
THEFT OF INFORMATION, A DELAY IN TRANSMITTING INFORMATION THAT RESULTS IN A FINANCIAL PENALTY AND/OR THE LOSS OF GOOD WILL OR REPUTATION.
In information security, what constitutes a loss?
CYBERCRIMINALS
A network of attackers, identity thieves, spammers, and financial fraudsters.
CONFIDENTIALITY
Security actions that ensure that only authorized parties can view the information.
INFORMATION SECURITY
A broad term frequently used to describe the tasks of securing information that is in a digital format.
RISK
A situation involving exposure to danger.
CYBERTERRORISM
A premeditated, politically motivated attack against information, computer systems, computer programs, and data which often results in violence.
THREAT AGENT
A person or element that has the power to carry out a threat.
THREAT VECTOR
The means by which an attack could occur.
ASSET
An item that has value.
EXPLOIT KIT
Automated attack package that can be used without an advanced knowledge of computers. (ie Script Kiddies)
THREAT
A type of action that has the potential to cause harm.
VULNERABILITY
A flaw or weakness that allows a threat agent to bypass security.
HACTIVIST
Attacker who attacks for ideological reasons that are generally not as well-defined as a cyberterrorist's motivation.
IDENTITY THEFT
A crime that involves stealing another person's personal information (ie Social Security number, DOB, address, etc) and then using the information to impersonate the victim for financial gain.
22%
According to the US Bureau of Labor Statistics, what percentage of growth is the available job outlook supposed to reach by the end of the decade?
EXPLOIT KIT
Automated attack package that can be used without an advanced knowledge of computers. (ie. script kiddies)
TRUE
(T/F) Security is the goal to be free from danger as well as the process that achieves that freedom.
INTEGRITY
Information protection item that ensures that information is correct and that no unauthorized person or malicious software has altered that data.
a force of nature such as a tornado that could destroy computer equipment

a virus that attacks a computer network

A person attempting to break into a secure computer network
What are some examples of what a threat agent can be?
Indonesia
What country is now the # 1 source of attack traffic?
TRUE
(T/F) The CompTIA Security+ Certification is aimed at an IT security professional with the recommended background of a minimum of 2 years experience in IT administration with a focus on security.
$1,500,000
Those who wrongfully disclose individually identifiable health information can be fined up to what amount per calendar year?
TRUE
(T/F) A security administration has both technical knowledge and managerial skills.
Love Bug
To date, the single most expensive malicious attack occurred in 2000, which cost an estimated $8.7 billion. What was the name of this attack?
AUTHENTICATION
The security protection item that ensure that the individual that ensures that the individual is who they claim to be (authentic or genuine person) and not an imposter is known as?
DISTRIBUTED
In what kind of attack can attackers make use of hundreds of thousands of computers under their control in an attack against a single server or network?
TRUE
(T/F) Today's software attack tools do not require any sophisticated knowledge on the part of the attacker.
Risk Avoidance
Proper ________________ involves identifying risks but making the decision to not engage in the activity
SCRIPT KIDDIES
What term best describes individuals who want to attack computers yet lack the knowledge of computers and networks needed to do so?
MANAGER
What information security position reports to the CISO and supervises technicians, administrators and security staff?
Chief Information Security Officer (CISO)
The person who reports directly to the Chief Information Officer (CIO) and is responsible for assessing, managing and implementing security.
vulnerability
An example of a(n) _____________that information security must deal w/is a software defect in an operating system that allows an unauthorized user to gain access to a computer w/o the user's knowledge of permission.
Sets found in the same folder