Computer & IW Fundamental Term II Quiz

Basic troubleshooting of a domain PC involves identifying and resolving common issues that prevent users from successfully logging in, often caused by problems with the system clock, DNS servers, or user authentication.

<p>Security Policy</p> Signup and view all the answers

<p>Information security is crucial because it protects valuable data and systems from unauthorized access, modification, destruction, or disruption of services. This ensures the confidentiality, integrity, and availability of essential information and resources.</p> Signup and view all the answers

<p>Critical Information Infrastructure (CII) refers to physical or virtual information systems that control, process, transmit, receive, or store electronic data. It is considered crucial to the functioning of essential services and infrastructure. Examples of CII include national energy grids, transportation networks, and communication systems.</p> Signup and view all the answers

<p>The CIA Triad is a foundational concept in information security, comprised of Confidentiality, Integrity, and Availability. Confidentiality protects sensitive data from unauthorized disclosure. Integrity ensures that information remains accurate and unaltered. Availability ensures that information is accessible to authorized users when needed. The CIA Triad is a fundamental framework for designing security controls and policies.</p> Signup and view all the answers

<p>Examples of vulnerabilities include weak passwords, outdated software without security updates, unsecured network configurations, inadequate physical security measures, lack of proper user training, and social engineering tactics that exploit human trust.</p> Signup and view all the answers

<p>Information security breaches can occur due to various actions, including unauthorized access to data, disclosure of sensitive information, data tampering, destruction or interference with computing systems, system outages or failures, and denial of service.</p> Signup and view all the answers

<p>General IT policies encompass a comprehensive set of guidelines and regulations to ensure the secure and efficient operation of IT systems, networks, user access, and data security. They often include policies on password management, virus protection, data backups, incident response, network access, and user behavior within the IT environment.</p> Signup and view all the answers

<p>Cyberspace refers to the virtual, interconnected realm where electronic systems, networks, and individuals interact through digital communication channels. It encompasses the internet, intranets, wireless networks, and various digital platforms. Cyberspace transcends physical boundaries.</p> Signup and view all the answers

<p>Attack Methodology Analysis (AMA) is a structured approach for identifying vulnerabilities in computer-based systems and networks. It involves assessing potential attack vectors, mapping existing exploits, and analyzing the gap between security capabilities and accessible exploit technology. AMA helps organizations better understand threat actors and their tactics, enhancing security measures.</p> Signup and view all the answers

<p>Social media encompasses a wide variety of online platforms where people connect and share content. These platforms allow users to interact through profiles, news feeds, messages, photos, and videos. Common examples include Facebook, Twitter, Instagram, and YouTube. Social media platforms facilitate communication, information sharing, entertainment, and community building.</p> Signup and view all the answers

<p>Examples of cyber weapons include: (a) Duqu, a sophisticated malware designed for espionage, (b) Flame, a highly sophisticated malware that targets specific systems, (c) Great Cannon, a tool used for network censorship and cyberattack, and (d) Stuxnet, a malware that targeted specific industrial systems. Cyber weapons are designed for military, paramilitary, or intelligence objectives.</p> Signup and view all the answers

<p>Physical security of IT assets encompasses protecting valuable hardware, software, and data centers from unauthorized access and physical harm. This includes measures like secure server rooms, access control systems, surveillance cameras, environmental monitoring, and securing network infrastructure.</p> Signup and view all the answers

<p>Physical controls are tangible measures to protect IT assets, such as doors, locks, fences, security guards, surveillance systems, environmental systems, and fire suppression systems. They implement physical barriers and security measures to prevent unauthorized access.</p> Signup and view all the answers

<p>Access controls categorize various security measures to regulate access to IT systems and sensitive data. Categories commonly include: Directive (defining acceptable rules), Deterrent (discouraging unauthorized actions), Preventive (blocking security breaches), Compensating (providing alternative security measures), Detective (detecting security incidents), Corrective (remediating breaches), Recovery (restoring normal operations after incidents).</p> Signup and view all the answers

<p>Personnel security focuses on managing the risk of employees or contractors abusing their access privileges to compromise organizational security. It includes processes for selecting trustworthy personnel, conducting background checks, training on security policies, monitoring employee behavior, and implementing proper termination procedures.</p> Signup and view all the answers

<p>Core categories of personnel security include: Screening (verifying employee credentials), Contracts (legal agreements to protect interests), Security Policy Acknowledgement (ensuring employees understand security policies), Security Education (training on information security principles), Monitoring (tracking employee actions), and Termination Procedures (managing employee departures).</p> Signup and view all the answers