Microsoft® Windows® Security: Essentials

Chapter 1

1. Risk occurs when threats have the potential to exploit vulnerabilities. A more detailed definition comes from NIST SP 800-30: “Risk is a function of the likelihood of a given threat-source’s exercising a particular potential vulnerability, and the resulting impact of that adverse event on the organization.”

2. True Vulnerabilities are weaknesses, and by reducing vulnerabilities, you reduce risk.

3. D Confidentiality ensures that only authorized people have access to data. Confidentiality is ensured with access controls and encryption.

4. C Preventing the loss of integrity ensures that unauthorized changes are detected. Audit logs and hashing techniques are the primary methods.

5. The principle of least privilege The principle ...