SBOLC SEC+ EXAM STUDY GUIDE
CIA triad - Answers- Confidentiality, Integrity, Availability
Confidentiality - Answers- Ensuring that information is view-able only by authorized
users (encryption)
Integrity - Answers- Ensures information remains accurate and complete over its entire
lifetime (Hashing)
Availability - Answers- ensures that information is always available to authorized users (
Load balancing, redundancy , high availability 99.99%)
High Availibilty - Answers- 99.99% 5 minutes of down time a year
Risk - Answers- a chance of harm coming to an asset
true positive - Answers- A problem occurred, and the analysis recognized it. This is a
good result:
even if the problem itself is bad, it was recognized and can be addressed.
True negative - Answers- The event was benign, and triggered no alerts. This is a good
result,
since everything is quietly working properly.
false positive - Answers- The event was benign, but the analysis mistook it for a
problem. This is
bad: frequent false alarms can disrupt routine functions, cost administrators time, or just
make people less alert when a real attack happens.
false negative - Answers- problem occurred, and the analysis mistook it for benign
behavior.
This is potentially disastrous, since security could be compromised without anyone
knowing.
SECURITY CONTROLS (4) - Answers- Tools and measures used to achieve security:
Administrative
Technical
Operational
Physical
Administrative - Answers- Represent organizational policies and training regarding
security. I.E Procedure Managment
Technical - Answers- Technological solutions used to enforce security
