2.1 Explain the Importance of security concepts in an enterprise environment

Question 1

Helps ensure that systems are deployed in a secure and consistent state and that they stay in a secure and consistent state throughout their lifetime.

Answer 1

Configuration Management

Question 2

The initial implementation of a system under the standardized minimal level of security that all systems in an organization must comply with.

Answer 2

Baseline Configuration

Question 3

The concept that, once information has been converted into a binary form and stored as digital files, it is subject to the laws of the country within which the storage device resides.

Answer 3

Data Sovereignty

Question 4

The collection of security measures intended to control access in order to optimize the protection of confidentiality, integrity and availability (CIA)

Answer 4

Data Protection

Question 5

Systems specifically implemented to detect and prevent unauthorized access to, use of, or transmission of sensitive information.

Answer 5

Data Loss Prevention (DLP)

Question 6

The hiding of content when being displayed or printed.

Answer 6

Masking

Question 7

Data States

Answer 7

At rest, in transit/ motion and in processing.

Question 8

Uses unique identifying symbols / characters to represent sensitive data.

Answer 8

Tokenization

Question 9

The governance of the permissions and privileges granted to users.

Answer 9

Rights management

Question 10

Used to encrypt traffic between a web browser and web server.

Answer 10

Secure Sockets Layer (SSL) and Transport Layer Security (TLS)

Question 11

A dedicated device used to decode secure communications for the purpose of filtering and monitoring.

Answer 11

SSL/ TLS inspection

Question 12

Providing a secondary location where a business can be moved and mission-critical business operations can be performed. The three levels of alternate sites are are: hot, warm, and cold.

Answer 12

Site resiliency

Question 13

A fictitious environment designed to fool attackers and intruders and lure them away from the private secured network.

Answer 13

Honeypots

Question 14

False work files that are used to tempt intruders or problematic insiders.

Answer 14

Honeyfiles

Question 15

Two or more networked honeypots used in tandem to monitor or recreate larger, more diverse network arrangements.

Answer 15

Honeynets

Question 16

Used to trick an intruder or malicious code into thinking/ perceiving that an attack is occurring against a real target.

Answer 16

Fake Telemetry

Question 17

A false telemetry system which attempts to provide false responses to DNS queries from malware, such as bots.

Answer 17

DNS Sinkhole