The C.I.A. triangle includes Confidentiality, Integrity, and Authenticity

Information security aims to eliminate all risks completely

MULTICS was the first operating system created with security as its primary goal.

The C.I.A. triangle originally stood for Confidentiality, Integrity, and Authentication. 

ARPANET was designed with security as its top priority. 

A computer can be both the subject and object of an attack.

The bottom-up approach to information security implementation is generally more successful than the top-down approach.

The maintenance phase is typically the shortest and least expensive phase of the SDLC. 

The Chief Information Security Officer usually reports directly to the CEO.

Security through obscurity is considered a best practice in information security.

Software piracy is considered a threat to intellectual property. 

Viruses require human interaction to replicate, while worms do not

The greatest threat to information security comes from external hackers. 

A SYN flood attack exploits the three-way handshake in TCP/IP.

Buffer overflow vulnerabilities are most common in Java programs. 

Social engineering attacks target technical vulnerabilities rather than human psychology.

A Trojan horse appears to be useful software but hides malicious code.

Technology obsolescence can lead to unreliable systems.

The McCumber Cube addresses only technical aspects of security.

Information security is considered both an art and a science.

What three elements made up the original C.I.A. triangle?

What was the predecessor to the modern Internet?

Name two types of deliberate software attacks. 

What are the six phases of the Systems Development Life Cycle? 

What term describes individuals who use pre-written exploits rather than creating their own? 

What type of attack overwhelms a system with spoofed ping packets?

What are the three main components of an information system according to the CNSS model?

Hurricane damaging a data center

Employee accidentally deleting important files

Installing a keylogger on a victim's computer

Patent infringement lawsuit

Script kiddie using a known exploit

Outdated firewall firmware causing vulnerabilities

Hacktivist group defacing a company website

Ransomware attack demanding payment

Shoulder surfing to obtain login credentials

Stolen laptop containing customer data

Buffer overflow vulnerability in legacy software

Typing incorrect data into a critical database

Distributed Denial of Service (DDoS) attack

Industrial spy stealing trade secrets

Earthquake disrupting network operations