20 Questions
Which of the following best describes risk in the context of asset protection?
The combination of a threat and vulnerability
What is the purpose of identifying assets in the risk management process?
To prioritize the assets for protection
Which framework is commonly used to discuss the nature of threats in risk management?
The CIA triad
What is the relationship between vulnerabilities and threats in risk assessment?
Vulnerabilities are assessed in the context of threats
Which of the following is NOT considered a risk in the given context?
Invalid data resulting in a rejected transaction
What are physical controls in the context of risk management?
Controls that maintain the physical environment
What are logical controls in the context of risk management?
Controls that protect systems and networks
What are administrative controls in the context of risk management?
Controls that dictate user behavior
What is the purpose of mitigating risks in the risk management process?
To reduce the impact and likelihood of risks
What is the significance of a single point of failure in the context of risk assessment?
It increases the likelihood of risks
Which type of attack primarily affects the integrity of a system, but could also affect availability?
Fabrication Attack Example 1
Which type of attack involves generating email as a method for propagating malware?
EX: Fabrication Attack
Which type of tape in the shipment of backup tapes example would likely be of very little utility to an attacker or unauthorized person?
Encrypted tapes
Which operating system is unlikely to be affected by a virus that is problematic on a Windows operating system?
Linux operating system
What is the likelihood that something bad will happen called?
Risk
Which factor might be considered a vulnerability in an environment?
All of the above
Which type of attack involves generating data, processes, communications, or other similar material with a system?
Fabrication Attack
Which type of tape in the shipment of backup tapes example would be of much greater utility to an attacker or unauthorized person?
Unencrypted tapes
Which type of attack involves generating enough additional processes, network traffic, email, web traffic, or nearly anything else that consumes resources to conduct an availability attack?
Fabrication Attack Example 3
Which type of attack primarily affects integrity but could also affect availability?
Fabrication Attack Example 1
Test your knowledge on data security and encryption with this quiz. Learn about the utility of encrypted and unencrypted backup tapes and understand the importance of protecting sensitive information.
Make Your Own Quizzes and Flashcards
Convert your notes into interactive study material.
Get started for free
