Computer Security Principles Quiz

<p>Protection from unauthorized disclosure of data (C)</p> Signup and view all the answers

<p>Individuals control who stores and accesses their personal information (C)</p> Signup and view all the answers

<p>Data integrity (A)</p> Signup and view all the answers

<p>Unrestricted access (B)</p> Signup and view all the answers

<p>To trace actions back to their originating entity (D)</p> Signup and view all the answers

<p>Denial of a transaction or message by a party (D)</p> Signup and view all the answers

<p>Preventing unauthorized access (B)</p> Signup and view all the answers

<p>Data received is exactly as sent. (D)</p> Signup and view all the answers

<p>The communicating entities are who they claim to be. (B)</p> Signup and view all the answers

<p>To protect against denial of a communication. (D)</p> Signup and view all the answers

<p>Access Control (A)</p> Signup and view all the answers

<p>The source of the data is genuine. (A)</p> Signup and view all the answers

<p>To ensure data confidentiality and integrity. (D)</p> Signup and view all the answers

<p>By appending a check value and comparing it upon receipt. (A)</p> Signup and view all the answers

<p>It enables two entities to verify each other's identities. (D)</p> Signup and view all the answers

<p>To prevent unwanted access and misuse of data. (B)</p> Signup and view all the answers

<p>To verify the authenticity of a document or information. (D)</p> Signup and view all the answers

<p>Only authorized parties can access data. (C)</p> Signup and view all the answers

<p>Authentication (B)</p> Signup and view all the answers

<p>To authenticate the origin and integrity of data. (C)</p> Signup and view all the answers

<p>Traffic Padding (C)</p> Signup and view all the answers

<p>A party cannot deny having performed an action. (D)</p> Signup and view all the answers

<p>They involve unauthorized access or interception of data. (B)</p> Signup and view all the answers

<p>Snooping (A)</p> Signup and view all the answers

<p>To gather information about communicating parties. (A)</p> Signup and view all the answers

<p>They threaten the integrity of the data. (C)</p> Signup and view all the answers

<p>Five (D)</p> Signup and view all the answers

<p>An unauthorized entity pretends to be another entity. (C)</p> Signup and view all the answers

<p>Modifying a message after it has been sent for personal gain. (D)</p> Signup and view all the answers

<p>An attacker retransmits a previously captured message. (C)</p> Signup and view all the answers

<p>An entity claiming they did not send or receive a message. (A)</p> Signup and view all the answers

<p>Denial of Service (A)</p> Signup and view all the answers

<p>Criminal attack (C)</p> Signup and view all the answers

<p>Observing network traffic patterns (A)</p> Signup and view all the answers

<p>Achieving notoriety in the media (D)</p> Signup and view all the answers

<p>It involves altering or disrupting data. (A)</p> Signup and view all the answers

<p>Publicity attack (B)</p> Signup and view all the answers

<p>User A denies sending money to User B. (A)</p> Signup and view all the answers

<p>To make a service unavailable. (D)</p> Signup and view all the answers

<p>Threat to confidentiality (D)</p> Signup and view all the answers

<p>Threat to integrity (C)</p> Signup and view all the answers

<p>Confidentiality (A)</p> Signup and view all the answers

<p>Sending excessive bogus data (A)</p> Signup and view all the answers

<p>Masquerading (B)</p> Signup and view all the answers

<p>Encryption (B)</p> Signup and view all the answers

<p>Denial-of-Service (DoS) attacks (A)</p> Signup and view all the answers

<p>Encryption (C)</p> Signup and view all the answers

Protecting computer systems and data to preserve confidentiality, integrity, and availability.

Ensuring private information is only accessible to authorized individuals.

Protecting sensitive data from unauthorized access.

Ensuring data is only changed by authorized individuals.

Ensuring authorized users can access the system when needed.

Ensuring a system functions correctly without unauthorized modifications.

Ensuring authorized users can access system services promptly.

Verifying user identity and message validity.

Preventing denial of a party's actions in a transaction.

Verifying the identity of the parties involved in communication.

Guaranteeing the source of data is legitimate.

Prevents denial of communication by any participant.

Restricting access to resources based on user permissions.

Hiding or covering data to keep it secret and ensure its original state hasn't changed. Steganography is a method used for this.

Electronically signing data to prove its origin and prevent tampering. It acts as a guarantee of authenticity and non-repudiation.

Two parties verifying each other's identities through a series of messages. This ensures they are who they claim to be.

Blocking unwanted access attempts and malicious activity by selectively allowing or denying network traffic.

Verifying the identity of a party. It's like a passport that proves who you are in the digital world.

An attack motivated by financial gain, aiming to exploit vulnerabilities for personal or financial benefits.

An attack designed to gain notoriety or attention by disrupting services or causing damage, often for personal fame or agenda.

An attack focused on identifying and exploiting security weaknesses of a system, often for legal purposes like penetration testing or vulnerability analysis.

An attack that involves monitoring and observing system behavior without altering or interfering with it.

An attack that directly modifies or manipulates system data, functionalities, or network traffic, causing harm or disruption.

An attack where the attacker observes data transmission without altering the original message. This focuses on gaining information without directly modifying the system.

An attacker intercepts and reads data without authorization. This is also known as snooping.

Monitoring internet traffic to learn about communicating parties, such as who is communicating and their addresses. This is possible even if the data is unencrypted.

An attack that alters the original message or creates a fake message, threatening the integrity of the data.

Active attacks threaten the integrity of the data, meaning the data may be altered or corrupted.

An attack where an unauthorized entity pretends to be someone else to gain access or deceive others.

Changing the contents of a message after it's been sent, often for malicious purposes.

An attacker steals a message and resends it later to gain unauthorized access or perform actions.

An attack where the sender or receiver of a message denies ever having sent or received it.

An attacker prevents legitimate users from accessing a service by overloading the server.

An attempt to access or steal sensitive information without authorization.

An attempt to modify or corrupt data, compromising its accuracy or trustworthiness.

An action that aims to prevent users from accessing a system or service, making it unavailable.

Unauthorized disclosure of protected information, like revealing your shopping history or tracking your online movements.

Modifying, deleting, or inserting data without authorization, like altering your bank account balance or replaying a message to trick someone.

Denying authorized users access to data or services, for example, making a website unavailable for legitimate users.

Transforming plain text into a scrambled code, like a secret language, to protect it from unauthorized access.

Unlocking the scrambled code back into plain text, like decoding a secret message to understand its contents.