Unit 10C Computer Security

Question 1

Computer security provides:

Answer 1

Provides Confidentiality, Integrity, and Availability (CIA) assurances to users

Question 2

Roles in computer security:

Answer 2

Users, Black hat hackers, white hats

Question 3

The International Information System Security Certification Consortium (ISC)2 code of ethics:

Answer 3

Protect, have honour, provide services, adhere to profession

Question 4

Asset State in McCumber Cube:

Answer 4

Where info is when exploited

Question 5

Safeguards

Answer 5

How to protect technical, storage, procedural, and human factors

Question 6

Confidentiality, Integrity, and Availability (CIA) in McCumber Cube

Answer 6

Quality and safety. CIA itself

Question 7

Asset

Answer 7

Something of value to protect

Question 8

Threat

Answer 8

Potential event. Loss of value or data

Question 9

Mitigation is the process . . .

Answer 9

Process of reducing risks

Question 10

Attack Vector

Answer 10

A path an attacker takes to access an asset

Question 11

Threat Modelling is the process . . .

Answer 11

Process of analysing a system for vulnerabilities

Question 12

Disclosure attacks

Answer 12

Confidentiality. Asset viewed against the owner’s wishes

Question 13

Alteration attacks

Answer 13

Integrity. Unauthorised change to/on user’s data

Question 14

Denial attack

Answer 14

Availability. Disrupts access to system

Question 15

STRIDE:

Answer 15

Spoofing, Tampering, Repudiation (Hide tracks), Info disclosure, Denial of service, Elevation of privileges