2-9

Question 1

What are asset management controls used for?

Answer 1

Protect information and systems from unauthorized access, modification, and disruption.

Question 2

What are some access control solutions?

Answer 2

Cryptography, DLP, CASB, and DRM are used to enforce access control policies.

Question 3

What are some use cases for cryptography?

Answer 3

Encryption is for confidentiality, Hashing is for integrity, Digital Signatures is for integrity and non-repudiation, and digital certificates are used for authentication.

Question 4

What are CASBs and how do they function?

Answer 4

Cloud Access Security Brokers, they proxy ttaffic and use auto discovery to identify cloud based apps. Security Policies are then interjected. It can control “shadow” IT.

Question 5

What is DRM and what does it do?

Answer 5

DRM prevents unauthorized copying, distribution, and use of digital content. It prevents editing, sharing, saving, forwarding, printing, and screenshotting. It can limit the number of usages, limit to device/ip/location, and watermark.

Question 6

What are PETs and what do they do?

Answer 6

Pets are Privacy Enhancement Technologies and they help ensure the continuity of privacy and data protection even after data is collected and transferred. It includes data obfuscation, encryption processing tools, analyics, and data accountabilty tools.

Question 7

What is synthetic data?

Answer 7

Artificial data with similar statistical properties as the real data

Question 8

What is tokenization?

Answer 8

Substituting sensitive data with non-sensitive in production environments

Question 9

What is psuedo-anonymization?

Answer 9

Method to substitute identifiable data with reversible consistent value