1 - Security Mindset

Question 1

What is CIA?

Answer 1

Confidentiality - data is not made available or disclosed to unauthorized parties

Integrity - maintaining the accuracy and completeness of data over lifespan

Availability - information accessible when needed

Question 2

Threats, vulnerabilities, attacks

Answer 2

Threat actors - exploit vulnerabilities to launch attacks

Attacks - lead to compromises or security breaches

Vulnerabilities - can be found in software, networks and hu,ams

Question 3

Basic design for secure systems

Answer 3

Least privilege - uses min privilege to complete task

Economy of mechanism - keep it simple stupid

Open Design - don’t rely on obscurity

Complete mediation - attempts to access secure resource checked for auth

Failsafe defaults - access must be explicitly granted or it is denied

Ease of use - don’t give devs a burden