1.2 Security Goals & Controls

Question 1

What is the CIA Triad and non repudiation:

Answer 1

Confidentiality: Protecting information from unauthorized access.

Integrity: Ensuring information is accurate and complete.

Availability: Ensuring information is accessible when needed.

Non-Repudiation: Proving that a specific action was performed by a specific individual.

Question 2

What is AAA ?

Answer 2

Authentication: Verifying the identity of a user or device.
Knowledge-based: Passwords, PINs
Possession-based: Smart cards, tokens
Inherence-based: Biometrics (fingerprint, facial recognition)

Authorization: Granting permissions to access resources.

Accounting: Tracking user activity and resource usage.

Question 3

What are the categories of Security Controls? (TAP)

Answer 3

Technical Controls: Security measures implemented through technology.
Firewalls, intrusion detection systems, encryption, etc.

Administrative Controls: Policies, procedures, and guidelines.
Access control policies, security awareness training, incident response plans.

Physical Controls: Physical safeguards to protect hardware and facilities.
Locks, security guards, surveillance cameras, environmental controls.