FiltersDone

Question type

Essay

Multiple Choice

Short Answer

True False

Matching

Exam 1: Introduction to Information Security

Show Answer

Share

---

All types

Filters

Study FlashcardsPractice ExamLearn

Question 31

True/False

Review LaterAdd Note

Review Later

The investigation phase of the SDLC involves specification of the objectives, constraints, andscope of the project.

A) True
B) False

Correct Answer

verified

Show Answer

Question 32

Short Answer

Review LaterAdd Note

Review Later

The CNSS model of information security evolved from a concept developed by the computer security industry known as the ____________________ triad.

Correct Answer

verified

CIAC.I.A.Confidentia...

View Answer

Show Answer

Question 33

Multiple Choice

Review LaterAdd Note

Which of the following phases is often considered the longest and most expensive phase of the systems development life cycle  

A breach of possession may not always result in a breach of confidentiality.

Information security can begin as a grassroots effort in which systems administrators attempt to improve the security of their systems, often referred to as the bottom-up approach. _________________________

__________ was the first operating system to integrate security as one of its core functions.

Information security can be an absolute.

The physical design is the blueprint for the desired solution.

In an organization, the value of ____________________ of information is especially high when it involves personal information about employees, customers, or patients.

In the ____________________ approach, the project is initiated by upper-level managers who issue policy, procedures, and processes, dictate the goals and expected outcomes, and determine accountability for each required action.

During the ____________________ War, many mainframes were brought online to accomplish more complex and sophisticated tasks, so it became necessary to enable the mainframes to communicate via a less cumbersome process than mailing magnetic tapes between computer centers.

When unauthorized individuals or systems can view information, confidentiality is breached. _________________________

A computer is the ____________________ of an attack when it is the entity being targeted.

An information system is the entire set of __________, people, procedures, and networks that enable the use of information resources in the organization.

The implementation phase is the longest and most expensive phase of the systems development life cycle (SDLC).

The ____________________ phase consists primarily of assessments of the organization, its current systems, and its capability to support the proposed systems.

The possession of information is the quality or state of having value for some purpose or end.

E-mail spoofing involves sending an e-mail message with a harmful attachment.

During the early years, information security was a straightforward process composed predominantly of ____________________ security and simple document classification schemes.

When a computer is the subject of an attack, it is the entity being attacked.