Questões de Concurso Público CIJUN - SP 2023 para Analista de TI Junior (Mobile)

Foram encontradas 50 questões

Q4197696 Inglês
Leia o texto para responder à questão.

Information Security (InfoSec) defined

Information security, often abbreviated InfoSec, is a set of security procedures and tools that broadly protect sensitive enterprise information from misuse, unauthorized access, disruption, or destruction. InfoSec encompasses physical and environmental security, access control, and cybersecurity. It often includes technologies like cloud access security brokers (CASB), deception tools, endpoint detection and response (EDR), and security testing for DevOps (DevSecOps), among others.

Key elements of information security


InfoSec comprises a range of security tools, solutions, and processes that keep enterprise information secure across devices and locations, helping to protect against cyberattacks or other disruptive events.

•  Application security - Policies, procedures, tools, and best practices enacted to protect applications and their data.w
•  Cloud security - Policies, procedures, tools, and best practices enacted to protect all aspects of the cloud, including systems, data, applications, and infrastructure.
•  Cryptography - An algorithm-based method of securing communication meant to ensure only intended recipients of a specific message can view and decipher it.
•  Disaster recovery - A method to reestablish functional technological systems in the wake of an event like a natural disaster, cyberattack, or another disruptive event.
•  Incident response - An organization’s plan for responding to, remediating, and managing the aftermath of a cyberattack, data breach, or another disruptive event.
•  Infrastructure security - Security that encompasses an organization’s entire technological infrastructure, including both hardware and software systems.
•  Vulnerability management - The process an organization takes to identify, assess, and remediate vulnerabilities in its endpoints, software, and systems.


Three pillars of information security: the CIA triad

Confidentiality, integrity, and availability make up the cornerstones of strong information protection, creating the basis for an enterprise’s security infrastructure. The CIA triad offers these three concepts as guiding principles for implementing an InfoSec plan.


Confidentiality

Privacy is a major component of InfoSec, and organizations should enact measures that allow only authorized users access to information. Data encryption, multi-factor authentication, and data loss prevention are some of the tools enterprises can employ to help ensure data confidentiality.

Integrity

Enterprises must maintain data’s integrity across its entire lifecycle. Enterprises with strong InfoSec will recognize the importance of accurate, reliable data, and permit no unauthorized user to access, alter, or otherwise interfere with it. Tools like file permissions, identity management, and user access controls help ensure data integrity.

Availability

InfoSec involves consistently maintaining physical hardware and regularly completing system upgrades to guarantee that authorized users have dependable, consistent access to data as they need it.


(www.microsoft.com/en-ww/security/business/security-101/ what-is-information-security-infosec#:~:text=Information%20 security%2C%20often%20abbreviated%20(InfoSec,access%2C%20 disruption%2C%20or%20destruction. Adaptado.)

According to the definition of Information Security provided in the first part of the text, the aim of InfoSec is to
Alternativas
Q4197697 Inglês
Leia o texto para responder à questão.

Information Security (InfoSec) defined

Information security, often abbreviated InfoSec, is a set of security procedures and tools that broadly protect sensitive enterprise information from misuse, unauthorized access, disruption, or destruction. InfoSec encompasses physical and environmental security, access control, and cybersecurity. It often includes technologies like cloud access security brokers (CASB), deception tools, endpoint detection and response (EDR), and security testing for DevOps (DevSecOps), among others.

Key elements of information security


InfoSec comprises a range of security tools, solutions, and processes that keep enterprise information secure across devices and locations, helping to protect against cyberattacks or other disruptive events.

•  Application security - Policies, procedures, tools, and best practices enacted to protect applications and their data.w
•  Cloud security - Policies, procedures, tools, and best practices enacted to protect all aspects of the cloud, including systems, data, applications, and infrastructure.
•  Cryptography - An algorithm-based method of securing communication meant to ensure only intended recipients of a specific message can view and decipher it.
•  Disaster recovery - A method to reestablish functional technological systems in the wake of an event like a natural disaster, cyberattack, or another disruptive event.
•  Incident response - An organization’s plan for responding to, remediating, and managing the aftermath of a cyberattack, data breach, or another disruptive event.
•  Infrastructure security - Security that encompasses an organization’s entire technological infrastructure, including both hardware and software systems.
•  Vulnerability management - The process an organization takes to identify, assess, and remediate vulnerabilities in its endpoints, software, and systems.


Three pillars of information security: the CIA triad

Confidentiality, integrity, and availability make up the cornerstones of strong information protection, creating the basis for an enterprise’s security infrastructure. The CIA triad offers these three concepts as guiding principles for implementing an InfoSec plan.


Confidentiality

Privacy is a major component of InfoSec, and organizations should enact measures that allow only authorized users access to information. Data encryption, multi-factor authentication, and data loss prevention are some of the tools enterprises can employ to help ensure data confidentiality.

Integrity

Enterprises must maintain data’s integrity across its entire lifecycle. Enterprises with strong InfoSec will recognize the importance of accurate, reliable data, and permit no unauthorized user to access, alter, or otherwise interfere with it. Tools like file permissions, identity management, and user access controls help ensure data integrity.

Availability

InfoSec involves consistently maintaining physical hardware and regularly completing system upgrades to guarantee that authorized users have dependable, consistent access to data as they need it.


(www.microsoft.com/en-ww/security/business/security-101/ what-is-information-security-infosec#:~:text=Information%20 security%2C%20often%20abbreviated%20(InfoSec,access%2C%20 disruption%2C%20or%20destruction. Adaptado.)

No trecho da primeira parte do texto “It often includes technologies like cloud access security brokers (CASB), deception tools, endpoint detection and response (EDR), and security testing for DevOps (DevSecOps), among others”, o termo destacado em negrito indica
Alternativas
Q4197698 Inglês
Leia o texto para responder à questão.

Information Security (InfoSec) defined

Information security, often abbreviated InfoSec, is a set of security procedures and tools that broadly protect sensitive enterprise information from misuse, unauthorized access, disruption, or destruction. InfoSec encompasses physical and environmental security, access control, and cybersecurity. It often includes technologies like cloud access security brokers (CASB), deception tools, endpoint detection and response (EDR), and security testing for DevOps (DevSecOps), among others.

Key elements of information security


InfoSec comprises a range of security tools, solutions, and processes that keep enterprise information secure across devices and locations, helping to protect against cyberattacks or other disruptive events.

•  Application security - Policies, procedures, tools, and best practices enacted to protect applications and their data.w
•  Cloud security - Policies, procedures, tools, and best practices enacted to protect all aspects of the cloud, including systems, data, applications, and infrastructure.
•  Cryptography - An algorithm-based method of securing communication meant to ensure only intended recipients of a specific message can view and decipher it.
•  Disaster recovery - A method to reestablish functional technological systems in the wake of an event like a natural disaster, cyberattack, or another disruptive event.
•  Incident response - An organization’s plan for responding to, remediating, and managing the aftermath of a cyberattack, data breach, or another disruptive event.
•  Infrastructure security - Security that encompasses an organization’s entire technological infrastructure, including both hardware and software systems.
•  Vulnerability management - The process an organization takes to identify, assess, and remediate vulnerabilities in its endpoints, software, and systems.


Three pillars of information security: the CIA triad

Confidentiality, integrity, and availability make up the cornerstones of strong information protection, creating the basis for an enterprise’s security infrastructure. The CIA triad offers these three concepts as guiding principles for implementing an InfoSec plan.


Confidentiality

Privacy is a major component of InfoSec, and organizations should enact measures that allow only authorized users access to information. Data encryption, multi-factor authentication, and data loss prevention are some of the tools enterprises can employ to help ensure data confidentiality.

Integrity

Enterprises must maintain data’s integrity across its entire lifecycle. Enterprises with strong InfoSec will recognize the importance of accurate, reliable data, and permit no unauthorized user to access, alter, or otherwise interfere with it. Tools like file permissions, identity management, and user access controls help ensure data integrity.

Availability

InfoSec involves consistently maintaining physical hardware and regularly completing system upgrades to guarantee that authorized users have dependable, consistent access to data as they need it.


(www.microsoft.com/en-ww/security/business/security-101/ what-is-information-security-infosec#:~:text=Information%20 security%2C%20often%20abbreviated%20(InfoSec,access%2C%20 disruption%2C%20or%20destruction. Adaptado.)

In the excerpt from the first part of the text “It often includes technologies”, the word in bold refers to
Alternativas
Q4197699 Inglês
Leia o texto para responder à questão.

Information Security (InfoSec) defined

Information security, often abbreviated InfoSec, is a set of security procedures and tools that broadly protect sensitive enterprise information from misuse, unauthorized access, disruption, or destruction. InfoSec encompasses physical and environmental security, access control, and cybersecurity. It often includes technologies like cloud access security brokers (CASB), deception tools, endpoint detection and response (EDR), and security testing for DevOps (DevSecOps), among others.

Key elements of information security


InfoSec comprises a range of security tools, solutions, and processes that keep enterprise information secure across devices and locations, helping to protect against cyberattacks or other disruptive events.

•  Application security - Policies, procedures, tools, and best practices enacted to protect applications and their data.w
•  Cloud security - Policies, procedures, tools, and best practices enacted to protect all aspects of the cloud, including systems, data, applications, and infrastructure.
•  Cryptography - An algorithm-based method of securing communication meant to ensure only intended recipients of a specific message can view and decipher it.
•  Disaster recovery - A method to reestablish functional technological systems in the wake of an event like a natural disaster, cyberattack, or another disruptive event.
•  Incident response - An organization’s plan for responding to, remediating, and managing the aftermath of a cyberattack, data breach, or another disruptive event.
•  Infrastructure security - Security that encompasses an organization’s entire technological infrastructure, including both hardware and software systems.
•  Vulnerability management - The process an organization takes to identify, assess, and remediate vulnerabilities in its endpoints, software, and systems.


Three pillars of information security: the CIA triad

Confidentiality, integrity, and availability make up the cornerstones of strong information protection, creating the basis for an enterprise’s security infrastructure. The CIA triad offers these three concepts as guiding principles for implementing an InfoSec plan.


Confidentiality

Privacy is a major component of InfoSec, and organizations should enact measures that allow only authorized users access to information. Data encryption, multi-factor authentication, and data loss prevention are some of the tools enterprises can employ to help ensure data confidentiality.

Integrity

Enterprises must maintain data’s integrity across its entire lifecycle. Enterprises with strong InfoSec will recognize the importance of accurate, reliable data, and permit no unauthorized user to access, alter, or otherwise interfere with it. Tools like file permissions, identity management, and user access controls help ensure data integrity.

Availability

InfoSec involves consistently maintaining physical hardware and regularly completing system upgrades to guarantee that authorized users have dependable, consistent access to data as they need it.


(www.microsoft.com/en-ww/security/business/security-101/ what-is-information-security-infosec#:~:text=Information%20 security%2C%20often%20abbreviated%20(InfoSec,access%2C%20 disruption%2C%20or%20destruction. Adaptado.)

Leia a parte do texto Key elements of information security para responder à questão.



No texto, os elementos chave de Segurança da Informação que mencionam explicitamente o uso de políticas são

Alternativas
Q4197700 Inglês
Leia o texto para responder à questão.

Information Security (InfoSec) defined

Information security, often abbreviated InfoSec, is a set of security procedures and tools that broadly protect sensitive enterprise information from misuse, unauthorized access, disruption, or destruction. InfoSec encompasses physical and environmental security, access control, and cybersecurity. It often includes technologies like cloud access security brokers (CASB), deception tools, endpoint detection and response (EDR), and security testing for DevOps (DevSecOps), among others.

Key elements of information security


InfoSec comprises a range of security tools, solutions, and processes that keep enterprise information secure across devices and locations, helping to protect against cyberattacks or other disruptive events.

•  Application security - Policies, procedures, tools, and best practices enacted to protect applications and their data.w
•  Cloud security - Policies, procedures, tools, and best practices enacted to protect all aspects of the cloud, including systems, data, applications, and infrastructure.
•  Cryptography - An algorithm-based method of securing communication meant to ensure only intended recipients of a specific message can view and decipher it.
•  Disaster recovery - A method to reestablish functional technological systems in the wake of an event like a natural disaster, cyberattack, or another disruptive event.
•  Incident response - An organization’s plan for responding to, remediating, and managing the aftermath of a cyberattack, data breach, or another disruptive event.
•  Infrastructure security - Security that encompasses an organization’s entire technological infrastructure, including both hardware and software systems.
•  Vulnerability management - The process an organization takes to identify, assess, and remediate vulnerabilities in its endpoints, software, and systems.


Three pillars of information security: the CIA triad

Confidentiality, integrity, and availability make up the cornerstones of strong information protection, creating the basis for an enterprise’s security infrastructure. The CIA triad offers these three concepts as guiding principles for implementing an InfoSec plan.


Confidentiality

Privacy is a major component of InfoSec, and organizations should enact measures that allow only authorized users access to information. Data encryption, multi-factor authentication, and data loss prevention are some of the tools enterprises can employ to help ensure data confidentiality.

Integrity

Enterprises must maintain data’s integrity across its entire lifecycle. Enterprises with strong InfoSec will recognize the importance of accurate, reliable data, and permit no unauthorized user to access, alter, or otherwise interfere with it. Tools like file permissions, identity management, and user access controls help ensure data integrity.

Availability

InfoSec involves consistently maintaining physical hardware and regularly completing system upgrades to guarantee that authorized users have dependable, consistent access to data as they need it.


(www.microsoft.com/en-ww/security/business/security-101/ what-is-information-security-infosec#:~:text=Information%20 security%2C%20often%20abbreviated%20(InfoSec,access%2C%20 disruption%2C%20or%20destruction. Adaptado.)

Leia a parte do texto Key elements of information security para responder à questão.

Os termos que evidenciam a diferença entre os objetivos de “Disaster recovery” e de “Incident response” são, respectivamente,
Alternativas
Q4197701 Inglês
Leia o texto para responder à questão.

Information Security (InfoSec) defined

Information security, often abbreviated InfoSec, is a set of security procedures and tools that broadly protect sensitive enterprise information from misuse, unauthorized access, disruption, or destruction. InfoSec encompasses physical and environmental security, access control, and cybersecurity. It often includes technologies like cloud access security brokers (CASB), deception tools, endpoint detection and response (EDR), and security testing for DevOps (DevSecOps), among others.

Key elements of information security


InfoSec comprises a range of security tools, solutions, and processes that keep enterprise information secure across devices and locations, helping to protect against cyberattacks or other disruptive events.

•  Application security - Policies, procedures, tools, and best practices enacted to protect applications and their data.w
•  Cloud security - Policies, procedures, tools, and best practices enacted to protect all aspects of the cloud, including systems, data, applications, and infrastructure.
•  Cryptography - An algorithm-based method of securing communication meant to ensure only intended recipients of a specific message can view and decipher it.
•  Disaster recovery - A method to reestablish functional technological systems in the wake of an event like a natural disaster, cyberattack, or another disruptive event.
•  Incident response - An organization’s plan for responding to, remediating, and managing the aftermath of a cyberattack, data breach, or another disruptive event.
•  Infrastructure security - Security that encompasses an organization’s entire technological infrastructure, including both hardware and software systems.
•  Vulnerability management - The process an organization takes to identify, assess, and remediate vulnerabilities in its endpoints, software, and systems.


Three pillars of information security: the CIA triad

Confidentiality, integrity, and availability make up the cornerstones of strong information protection, creating the basis for an enterprise’s security infrastructure. The CIA triad offers these three concepts as guiding principles for implementing an InfoSec plan.


Confidentiality

Privacy is a major component of InfoSec, and organizations should enact measures that allow only authorized users access to information. Data encryption, multi-factor authentication, and data loss prevention are some of the tools enterprises can employ to help ensure data confidentiality.

Integrity

Enterprises must maintain data’s integrity across its entire lifecycle. Enterprises with strong InfoSec will recognize the importance of accurate, reliable data, and permit no unauthorized user to access, alter, or otherwise interfere with it. Tools like file permissions, identity management, and user access controls help ensure data integrity.

Availability

InfoSec involves consistently maintaining physical hardware and regularly completing system upgrades to guarantee that authorized users have dependable, consistent access to data as they need it.


(www.microsoft.com/en-ww/security/business/security-101/ what-is-information-security-infosec#:~:text=Information%20 security%2C%20often%20abbreviated%20(InfoSec,access%2C%20 disruption%2C%20or%20destruction. Adaptado.)

Leia a parte do texto Key elements of information security para responder à questão.


No item “Incident response”, o termo “aftermath” equivale, em português, a

Alternativas
Q4197702 Inglês
Leia o texto para responder à questão.

Information Security (InfoSec) defined

Information security, often abbreviated InfoSec, is a set of security procedures and tools that broadly protect sensitive enterprise information from misuse, unauthorized access, disruption, or destruction. InfoSec encompasses physical and environmental security, access control, and cybersecurity. It often includes technologies like cloud access security brokers (CASB), deception tools, endpoint detection and response (EDR), and security testing for DevOps (DevSecOps), among others.

Key elements of information security


InfoSec comprises a range of security tools, solutions, and processes that keep enterprise information secure across devices and locations, helping to protect against cyberattacks or other disruptive events.

•  Application security - Policies, procedures, tools, and best practices enacted to protect applications and their data.w
•  Cloud security - Policies, procedures, tools, and best practices enacted to protect all aspects of the cloud, including systems, data, applications, and infrastructure.
•  Cryptography - An algorithm-based method of securing communication meant to ensure only intended recipients of a specific message can view and decipher it.
•  Disaster recovery - A method to reestablish functional technological systems in the wake of an event like a natural disaster, cyberattack, or another disruptive event.
•  Incident response - An organization’s plan for responding to, remediating, and managing the aftermath of a cyberattack, data breach, or another disruptive event.
•  Infrastructure security - Security that encompasses an organization’s entire technological infrastructure, including both hardware and software systems.
•  Vulnerability management - The process an organization takes to identify, assess, and remediate vulnerabilities in its endpoints, software, and systems.


Three pillars of information security: the CIA triad

Confidentiality, integrity, and availability make up the cornerstones of strong information protection, creating the basis for an enterprise’s security infrastructure. The CIA triad offers these three concepts as guiding principles for implementing an InfoSec plan.


Confidentiality

Privacy is a major component of InfoSec, and organizations should enact measures that allow only authorized users access to information. Data encryption, multi-factor authentication, and data loss prevention are some of the tools enterprises can employ to help ensure data confidentiality.

Integrity

Enterprises must maintain data’s integrity across its entire lifecycle. Enterprises with strong InfoSec will recognize the importance of accurate, reliable data, and permit no unauthorized user to access, alter, or otherwise interfere with it. Tools like file permissions, identity management, and user access controls help ensure data integrity.

Availability

InfoSec involves consistently maintaining physical hardware and regularly completing system upgrades to guarantee that authorized users have dependable, consistent access to data as they need it.


(www.microsoft.com/en-ww/security/business/security-101/ what-is-information-security-infosec#:~:text=Information%20 security%2C%20often%20abbreviated%20(InfoSec,access%2C%20 disruption%2C%20or%20destruction. Adaptado.)

Leia a parte do texto Three pillars of information security: the CIA triad para responder à questão.
No trecho do item Confidentiality “organizations should enact measures”, o termo destacado em negrito pode ser substituído, sem alteração de sentido, por
Alternativas
Q4197703 Inglês
Leia o texto para responder à questão.

Information Security (InfoSec) defined

Information security, often abbreviated InfoSec, is a set of security procedures and tools that broadly protect sensitive enterprise information from misuse, unauthorized access, disruption, or destruction. InfoSec encompasses physical and environmental security, access control, and cybersecurity. It often includes technologies like cloud access security brokers (CASB), deception tools, endpoint detection and response (EDR), and security testing for DevOps (DevSecOps), among others.

Key elements of information security


InfoSec comprises a range of security tools, solutions, and processes that keep enterprise information secure across devices and locations, helping to protect against cyberattacks or other disruptive events.

•  Application security - Policies, procedures, tools, and best practices enacted to protect applications and their data.w
•  Cloud security - Policies, procedures, tools, and best practices enacted to protect all aspects of the cloud, including systems, data, applications, and infrastructure.
•  Cryptography - An algorithm-based method of securing communication meant to ensure only intended recipients of a specific message can view and decipher it.
•  Disaster recovery - A method to reestablish functional technological systems in the wake of an event like a natural disaster, cyberattack, or another disruptive event.
•  Incident response - An organization’s plan for responding to, remediating, and managing the aftermath of a cyberattack, data breach, or another disruptive event.
•  Infrastructure security - Security that encompasses an organization’s entire technological infrastructure, including both hardware and software systems.
•  Vulnerability management - The process an organization takes to identify, assess, and remediate vulnerabilities in its endpoints, software, and systems.


Three pillars of information security: the CIA triad

Confidentiality, integrity, and availability make up the cornerstones of strong information protection, creating the basis for an enterprise’s security infrastructure. The CIA triad offers these three concepts as guiding principles for implementing an InfoSec plan.


Confidentiality

Privacy is a major component of InfoSec, and organizations should enact measures that allow only authorized users access to information. Data encryption, multi-factor authentication, and data loss prevention are some of the tools enterprises can employ to help ensure data confidentiality.

Integrity

Enterprises must maintain data’s integrity across its entire lifecycle. Enterprises with strong InfoSec will recognize the importance of accurate, reliable data, and permit no unauthorized user to access, alter, or otherwise interfere with it. Tools like file permissions, identity management, and user access controls help ensure data integrity.

Availability

InfoSec involves consistently maintaining physical hardware and regularly completing system upgrades to guarantee that authorized users have dependable, consistent access to data as they need it.


(www.microsoft.com/en-ww/security/business/security-101/ what-is-information-security-infosec#:~:text=Information%20 security%2C%20often%20abbreviated%20(InfoSec,access%2C%20 disruption%2C%20or%20destruction. Adaptado.)

Leia a parte do texto Three pillars of information security: the CIA triad para responder à questão.
O(s) item(ns) que destaca(m) a necessidade de permissão de acesso a dados apenas aos usuários autorizados são
Alternativas
Q4197704 Inglês
Leia o texto para responder à questão.

Information Security (InfoSec) defined

Information security, often abbreviated InfoSec, is a set of security procedures and tools that broadly protect sensitive enterprise information from misuse, unauthorized access, disruption, or destruction. InfoSec encompasses physical and environmental security, access control, and cybersecurity. It often includes technologies like cloud access security brokers (CASB), deception tools, endpoint detection and response (EDR), and security testing for DevOps (DevSecOps), among others.

Key elements of information security


InfoSec comprises a range of security tools, solutions, and processes that keep enterprise information secure across devices and locations, helping to protect against cyberattacks or other disruptive events.

•  Application security - Policies, procedures, tools, and best practices enacted to protect applications and their data.w
•  Cloud security - Policies, procedures, tools, and best practices enacted to protect all aspects of the cloud, including systems, data, applications, and infrastructure.
•  Cryptography - An algorithm-based method of securing communication meant to ensure only intended recipients of a specific message can view and decipher it.
•  Disaster recovery - A method to reestablish functional technological systems in the wake of an event like a natural disaster, cyberattack, or another disruptive event.
•  Incident response - An organization’s plan for responding to, remediating, and managing the aftermath of a cyberattack, data breach, or another disruptive event.
•  Infrastructure security - Security that encompasses an organization’s entire technological infrastructure, including both hardware and software systems.
•  Vulnerability management - The process an organization takes to identify, assess, and remediate vulnerabilities in its endpoints, software, and systems.


Three pillars of information security: the CIA triad

Confidentiality, integrity, and availability make up the cornerstones of strong information protection, creating the basis for an enterprise’s security infrastructure. The CIA triad offers these three concepts as guiding principles for implementing an InfoSec plan.


Confidentiality

Privacy is a major component of InfoSec, and organizations should enact measures that allow only authorized users access to information. Data encryption, multi-factor authentication, and data loss prevention are some of the tools enterprises can employ to help ensure data confidentiality.

Integrity

Enterprises must maintain data’s integrity across its entire lifecycle. Enterprises with strong InfoSec will recognize the importance of accurate, reliable data, and permit no unauthorized user to access, alter, or otherwise interfere with it. Tools like file permissions, identity management, and user access controls help ensure data integrity.

Availability

InfoSec involves consistently maintaining physical hardware and regularly completing system upgrades to guarantee that authorized users have dependable, consistent access to data as they need it.


(www.microsoft.com/en-ww/security/business/security-101/ what-is-information-security-infosec#:~:text=Information%20 security%2C%20often%20abbreviated%20(InfoSec,access%2C%20 disruption%2C%20or%20destruction. Adaptado.)

Leia a parte do texto Three pillars of information security: the CIA triad para responder à questão.
No trecho do item Availability “authorized users have dependable, consistent access to data as they need it”, o termo destacado em negrito pode ser substituído, sem alteração de sentido, po
Alternativas
Q4197705 Inglês
Leia o texto para responder à questão.

Information Security (InfoSec) defined

Information security, often abbreviated InfoSec, is a set of security procedures and tools that broadly protect sensitive enterprise information from misuse, unauthorized access, disruption, or destruction. InfoSec encompasses physical and environmental security, access control, and cybersecurity. It often includes technologies like cloud access security brokers (CASB), deception tools, endpoint detection and response (EDR), and security testing for DevOps (DevSecOps), among others.

Key elements of information security


InfoSec comprises a range of security tools, solutions, and processes that keep enterprise information secure across devices and locations, helping to protect against cyberattacks or other disruptive events.

•  Application security - Policies, procedures, tools, and best practices enacted to protect applications and their data.w
•  Cloud security - Policies, procedures, tools, and best practices enacted to protect all aspects of the cloud, including systems, data, applications, and infrastructure.
•  Cryptography - An algorithm-based method of securing communication meant to ensure only intended recipients of a specific message can view and decipher it.
•  Disaster recovery - A method to reestablish functional technological systems in the wake of an event like a natural disaster, cyberattack, or another disruptive event.
•  Incident response - An organization’s plan for responding to, remediating, and managing the aftermath of a cyberattack, data breach, or another disruptive event.
•  Infrastructure security - Security that encompasses an organization’s entire technological infrastructure, including both hardware and software systems.
•  Vulnerability management - The process an organization takes to identify, assess, and remediate vulnerabilities in its endpoints, software, and systems.


Three pillars of information security: the CIA triad

Confidentiality, integrity, and availability make up the cornerstones of strong information protection, creating the basis for an enterprise’s security infrastructure. The CIA triad offers these three concepts as guiding principles for implementing an InfoSec plan.


Confidentiality

Privacy is a major component of InfoSec, and organizations should enact measures that allow only authorized users access to information. Data encryption, multi-factor authentication, and data loss prevention are some of the tools enterprises can employ to help ensure data confidentiality.

Integrity

Enterprises must maintain data’s integrity across its entire lifecycle. Enterprises with strong InfoSec will recognize the importance of accurate, reliable data, and permit no unauthorized user to access, alter, or otherwise interfere with it. Tools like file permissions, identity management, and user access controls help ensure data integrity.

Availability

InfoSec involves consistently maintaining physical hardware and regularly completing system upgrades to guarantee that authorized users have dependable, consistent access to data as they need it.


(www.microsoft.com/en-ww/security/business/security-101/ what-is-information-security-infosec#:~:text=Information%20 security%2C%20often%20abbreviated%20(InfoSec,access%2C%20 disruption%2C%20or%20destruction. Adaptado.)

Leia a parte do texto Three pillars of information security: the CIA triad para responder à questão.
De acordo com a parte do texto Three pillars of information security: the CIA triard, é correto afirmar que:
Alternativas
Q4197969 Gerência de Projetos
Há diversas metodologias de gestão de projetos que podem ser adotadas, por parte de uma organização, visando ter sucesso em seus projetos. Dessa forma, a respeito de tais metodologias, é correto afirmar que
Alternativas
Q4197970 Gerência de Projetos
Uma das diversas metodologias de gestão de projetos utilizada é o Six Sigma, que utiliza um processo resumido e representado pelo acrônimo DMAIC.
Considerando cada letra desse acrônimo:
Alternativas
Q4197971 Engenharia de Software
Considere a seguinte representação gráfica de um elemento de gateway de controle utilizada na notação BPMN (Business Process Model and Notation). Imagem associada para resolução da questão

Essa representação corresponde a um gateway do tipo
Alternativas
Q4197972 Engenharia de Software
Considere a seguinte representação gráfica utilizada na notação BPMN (Business Process Model and Notation).
Imagem associada para resolução da questão
Essa figura compõe a representação de
Alternativas
Q4197973 Engenharia de Software
Na representação do diagrama de sequência da UML 2.0 há um tipo de representação que assinala restrição para o estado de um objeto.
Dessa forma, a notação para indicar que o objeto Teste deve estar no estado Ativo, em um diagrama de sequência, é:
Alternativas
Q4197974 Engenharia de Software
Em um diagrama de classes da UML é possível declarar um atributo como sendo derivado (calculado usando outros dados). A representação correta para declarar o atributo idade como sendo derivado é:
Alternativas
Q4197975 Programação
Em ambientes de desenvolvimento para a plataforma .NET, é comum o uso de ferramentas da Microsoft, sendo importante a escolha da(s) ferramenta(s) mais adequada(s).
Assinale a alternativa que corretamente descreve uma diferença entre as ferramentas Visual Studio e Visual Studio Code.
Alternativas
Q4197976 Programação
O comando da CLI (Command Line Interface) do .NET Core 3.1 e versões posteriores que usa o NuGet para, explicitamente (e não implicitamente), procurar por dependências de um projeto e baixá-las, se necessário, é:
Alternativas
Q4197977 Arquitetura de Software
O conjunto de problemas conceituais e técnicos que surgem quando um modelo orientado a objetos é mapeado em um modelo relacional para persistência de dados (Object-Relational Mapping ou ORM) é denominado
Alternativas
Q4197978 Programação
A API de desenvolvimento web do lado do cliente (client side) conhecida como DOM tem como finalidade
Alternativas
Respostas
21: C
22: B
23: C
24: A
25: D
26: E
27: A
28: E
29: B
30: D
31: D
32: A
33: E
34: B
35: A
36: B
37: A
38: B
39: A
40: C