Question 8

Match the terms with their corresponding definitions

-

Encryption

-

Reconnaissance

-

Log Analysis

-

CISO

-

Preventive controls

-

Application controls

-

COBIT5

-

COSO

-

access control matrix

-

authorization

-

Penetration testing

-

Vulnerabilities

-

Border router

-

Firewall

-

Biometric identifier

A.

The process of examining logs to identify evidence of possible attacks.

B.

A device that connects an organization's information system to the internet

C.

A framework that provides guidance for evaluating and enhancing internal control systems

D.

The process of restricting access of aythenticated users to specific portions of the system

E.

an employee responsible for information security that works to design, implement and promote sound security policies and procedures

F.

Flaws in a program

G.

Controls that prevent, detect, and correct transaction errors and fraud in application programs

H.

A special-purpose hardware or software running device that controls both inbound and outbound communication between the system behind the firewall and other networks

I.

Controls that deter problems before they occur

J.

A table used to implement authorization controls

K.

Provides a final layer of defense to prevent unauthorized access to sensitive information.

L.

A characteristic used as an authentication credential

M.

An authorized attempt to break into the organization's information system

N.

Learning about the target and identifying potential vulnerabilities.

O.

A framework that describes best practices for the effective governance and management of IT