Wgu d430 stuvia 2023 - Study guides, Class notes & Summaries

Information security - ANSWER-Keeping data, software, and hardware secure against unauthorized access, use, disclosure, disruption, modification, or destruction. Compliance - ANSWER-The requirements that are set forth by laws and industry regulations. Example : HIPPA/ HITECH- healthcare, PCI/DSS- payment card industry, FISMA- federal government agencies CIA - ANSWER-The core model of all information security. Confidential, integrity and availability Confidential - ANSWER-Allowing only t...

bounds checking - ANSWERto set a limit on the amount of data we expect to receive to set aside storage for that data *required in most programming languages * prevents buffer overflows race conditions - ANSWERA type of software development vulnerability that occurs when multiple processes or multiple threads within a process control or share access to a particular resource, and the correct handling of that resource depends on the proper ordering or timing of transactions input validation...

bounds checking - ANSWER-to set a limit on the amount of data we expect to receive to set aside storage for that data *required in most programming languages * prevents buffer overflows race conditions - ANSWER-A type of software development vulnerability that occurs when multiple processes or multiple threads within a process control or share access to a particular resource, and the correct handling of that resource depends on the proper ordering or timing of transactions input validati...

Information security -ANSWER Keeping data, software, and hardware secure against unauthorized access, use, disclosure, disruption, modification, or destruction. Compliance -ANSWER The requirements that are set forth by laws and industry regulations. Example : HIPPA/ HITECH- healthcare, PCI/DSS- payment card industry, FISMA- federal government agencies CIA -ANSWER The core model of all information security. Confidential, integrity and availability Confidential -ANSWER Allowing only those...

Define the confidentiality in the CIA triad. - ANSWER-Our ability to protect data from those who are not authorized to view it. Examples of confidentiality - ANSWER-A patron using an ATM card wants to keep their PIN number confidential. An ATM owner wants to keep bank account numbers confidential. How can confidentiality be broken? - ANSWER-Losing a laptop An attacker gets access to info A person can look over your shoulder Define integrity in the CIA triad. - ANSWER-The ability to ...

Define the confidentiality in the CIA triad. - ANSWER-Our ability to protect data from those who are not authorized to view it. Examples of confidentiality - ANSWER-A patron using an ATM card wants to keep their PIN number confidential. An ATM owner wants to keep bank account numbers confidential. How can confidentiality be broken? - ANSWER-Losing a laptop An attacker gets access to info A person can look over your shoulder Define integrity in the CIA triad. - ANSWER-The ability to ...

What is information security - ANSWER--A state of data -Action that an org. needs to take -Practices against threats (unknown/unnamed) IS is keeping 1,2,3 secure against 1-6 - ANSWER-keeping data/SW/HW secure against unauthorized access/use/disclosure/disruption/modification/destruction Assets are protected by their value to the org. in what order? - ANSWER-People Data HW/SW Compliance - ANSWER-The requirements set by laws and industry regulations EX: HIPPA, FISMA HIPPA/...

Kismet/NetStumbler - ANSWER-Wireless network monitoring tools to detect and analyze Wi-Fi networks and access points. First one is LINUX based and provides more in-depth analysis, used by professionals while Second one is Microsoft based, discovers and maps nearby Wi-Fi networks, used by beginners. NMAP - ANSWER-Network scanning tool to discover devices, open ports, and services on a network. Used by all OS. Wireshark - ANSWER-Packet analysis tool for capturing and analyzing network traffi...

Kismet/NetStumbler -ANSWER Wireless network monitoring tools to detect and analyze Wi-Fi networks and access points. First one is LINUX based and provides more in-depth analysis, used by professionals while Second one is Microsoft based, discovers and maps nearby Wi-Fi networks, used by beginners. NMAP -ANSWER Network scanning tool to discover devices, open ports, and services on a network. Used by all OS. Wireshark -ANSWER Packet analysis tool for capturing and analyzing network traffic i...