Information & Classification
This private-sector classification fits Social Security numbers and similar sensitive personal data.
What is Protected?
Providing a new employee with a username, smart card, or system access occurs during this phase.
What is provisioning?
This class of extinguisher is appropriate for energized electrical or computer-equipment fires.
What is Class C?
This protocol is the standard for sending email messages.
What is SMTP?
Copying data to a second location so it is available for immediate use is this.
What is data replication?
Upgrading information to a higher sensitivity level is called this.
What is reclassification?
Adding an employee to benefits and completing entry processes occurs during this stage.
What is onboarding?
A prolonged loss of electrical power lasting hours or days is called this.
What is a blackout?
This malware disguises itself as a legitimate program and typically needs user interaction.
What is a Trojan?
This sanitization method destroys access to encrypted data by eliminating the encryption key.
What is cryptographic erase?
This role decides the business value, required protection, and who should have access to an information asset.
What is the data owner?
Disabling accounts and removing access is critical during this employee-life-cycle stage.
What is termination?
A prolonged increase in voltage lasting minutes or hours is called this.
What is a power surge?
Unlike a virus, this malware can spread without attaching itself to a host file.
What is a worm?
This process evaluates whether a service provider is adequate before the organization relies on it.
What is due diligence?
This confidentiality model follows 'no read up, no write down.'
What is Bell-LaPadula?
This agreement protects confidential information shared with employees, contractors, or outsourcers.
What is a nondisclosure agreement (NDA)?
Secure-site design begins with selecting and evaluating this.
What is the site location?
This log-analysis method compares activity against patterns of known bad behavior.
What is signature analysis?
This internal process governs authorized changes to hardware, software, access, and business processes.
What is change control?
This integrity model follows 'no read down, no write up.'
What is Biba?
In SETA, this activity teaches the skills needed to perform a security-related function.
What is security training?
Perimeter fencing should generally be at least this height for the level discussed in the course.
What is 8 feet?
This log-analysis method looks for suspicious patterns that become visible only over time.
What is trend analysis?
For a long procedure with many decision points, this SOP format is usually the best fit.
What is a flowchart?