Chapter 1

Question 1

Confidentiality

Answer 1

Prevent the disclosure of sensitive information from unauthorized access

Question 2

Integrity

Answer 2

Prevention of unauthorized modification

Question 3

Availability

Answer 3

Assurance that systems and data are accessible by authorized users when needed

Question 4

Vulnerability

Answer 4

A system, network or device weakness

Question 5

Threat

Answer 5

Potential danger posed by a vulnerability

Question 6

Threat agent

Answer 6

The entity that identifies a vulnerability and seeks to exploit it

Question 7

Risk

Answer 7

The likelihood of a threat agent taking advantage of a threat combined with the corresponding business impact

Question 8

Exposure

Answer 8

Potential to experience loss from a threat

Question 9

Countermeasure

Answer 9

Actions to mitigate potential threats and reduce risk

Question 10

Asset

Answer 10

The item(s) to be protected

Question 11

Dealing with risk

Answer 11

Accept = acknowledge but no mitigation
Transfer = shift responsibility
Mitigate = apply safeguard
Avoid = eliminate exposure or the asset