1A - Security Fundamentals

Question 1

What is the CIA Triad?

Answer 1

Conceptual model to help those writing InfoSec policies. Confidentiality, Integrity, Availability.

Question 2

What is meant by confidentiality? Give an example of how we ensure this.

Answer 2

Preventing the disclosure of data to unauthorised people. Example: encryption.

Question 3

What is meant by Integrity? Give an example of how we ensure this.

Answer 3

Knowing that data has not been altered or tampered with. Example: hashing

Question 4

What is meant by Availability? Give an example of how we ensure this.

Answer 4

Ensuring that data is always available. Example: RAID (Redundant Array of Independent Disks), fail-over cluster, data backup, HVAC (Heating Ventilation and Air Conditioning)

Question 5

What is ‘Least privilege’?

Answer 5

Giving someone only the most limited access required

Question 6

What is ‘Defense in Depth’?

Answer 6

Protecting data with a series of protective layers