Fundamentals Of Information Security Study Guide Questions And Correct Answers

Post-incident activity phase {Ans: The risk management phase where we determine specifically what happened, why it happened, and what we can do to keep it from happening again.}The total of the available avenues through which our operating system might be attacked is called a(n) ________. {Ans: Attack surface}A database is vulnerable to SQL injection attacks through direct attempts to the database server or through applications software, including web applications. What is the most effective way of mitigating these attacks? {Ans: Validating user inputs}Mandatory access control (MAC) {Ans: Access is decided by a group of individual who has the authority to set access on resources}The Biba model {Ans: Primarily concerned with protecting the integrity of data, even at the expense of confidentiality. Two security rules: the simple integrity axiom * the * integrity axiom}Which storage media is least sensitive to temperature, humidity, magnetic fields, and impacts? {Ans: Flash media}