What does cybersecurity protect systems, networks, and information from?
Unauthorized access, harm, loss, or exposure.
What is a security control?
A measure used to protect systems, information, or users.
What does confidentiality protect information from?
Unauthorized access.
What does integrity ensure about data?
It remains accurate and unchanged.
When does availability ensure systems and information are accessible?
When needed.
What is a cybersecurity threat?
A potential danger that could cause harm.
What is a cybersecurity vulnerability?
A weakness that a threat or attacker can exploit.
What is malware?
Malicious software designed to harm a computer or system.
What does ransomware do to files and what does it demand?
It locks or encrypts files and demands payment.
What is phishing designed to trick people into doing?
Revealing sensitive information or taking an unsafe action.
What does authentication verify when a user logs in?
The user's identity.
What does authorization determine for an authenticated user?
What the user is allowed to access or do.
How does Role-Based Access Control assign user access?
Based on the user's job role.
What permissions does the principle of least privilege give a user?
Only the permissions needed to complete their work or task.
What is a backup?
An extra copy of important data.
What can a backup help restore after data loss, system failure, or ransomware?
Information.
What does data protection help prevent?
Unauthorized access, theft, loss, alteration, and exposure of personal and sensitive information.
What does data privacy concern?
How personal information is collected, used, stored, shared, and protected.
What is a data breach?
Unauthorized access to or exposure of protected data.
Which three principles make up the CIA Triad?
Confidentiality, integrity, and availability.
What is cybersecurity risk?
The possibility of harm arising from threats and vulnerabilities.
What are examples of cybersecurity vulnerabilities?
Outdated software, weak passwords, and excessive user-account permissions.
What does risk mitigation involve?
Taking steps to reduce the risk or impact of a data security incident.
How can a worm spread between computers?
It can spread automatically from one computer to another.
What does spyware secretly collect?
Information about a user's activities.
How does a Trojan appear to users?
It appears to be legitimate software.
What does social engineering trick a person into doing?
Revealing confidential information or taking an unsafe action.
Which named cyberattacks include brute-force attacks and eavesdropping?
Brute-force attacks, man-in-the-middle attacks, DoS attacks, DDoS attacks, and eavesdropping.
What user attribute can ABAC use when deciding access?
The user's location.
What are the three security control classifications by function?
Preventive, detective, and corrective.
What are the three security control classifications by type?
Administrative, technical, and physical.
What type of security control is a firewall?
A technical control.
What type of security control is a security camera?
A physical security control.
Which two examples of sensitive information are specified?
Passwords and financial information.
Answer 19 questions on Cybersecurity Fundamentals and Controls.
1. Which description best captures the purpose of cybersecurity?
2. A school introduces a measure to protect its student information and the people who use its systems. What is this measure called?
Go over the full study guide for Cybersecurity Fundamentals and Controls.
Read the study guide →Upload your class notes and Revizly writes your flashcards in about a minute.
Flashcard maker