2.1 Explain the importance of security concepts in an enterprise environment.

Question 1

Hot Site

Answer 1

a fully configured alternate network that can be quickly brought online after a disaster. With a hot site, systems and data are usually up-to-date.

Question 2

Cold Site

Answer 2

an alternate location where a network can be rebuilt after a disaster occurred. A cold site can take some time to implement, as systems and assets (including data) are not readily configured and available for full use.

Question 3

Warm Site

Answer 3

a dormant alternate location, or a location that performs noncritical functions under normal conditions but can be rapidly converted to a main operations site with minimal effort.

Question 4

Failover

Answer 4

refers to system redundancy. With a failover configuration, an additional device is configured to function when the primary configuration fails.

Question 5

Identify the removable device that when added to a system, provides cryptographic key generation, management, and storage.

Answer 5

HSM

Question 6

HSM

Answer 6

A Hardware Security Module (HSM) is a device used to generate, maintain and store cryptographic keys. It can be an external device and can easily be added to a system. The HSM will maintain the integrity of the key.

Question 7

TPM

Answer 7

The Trusted Platform Module (TPM) is a hardware-based encryption solution that is embedded in the system and provides secure key storage for full disk encryption.

Question 8

SoC

Answer 8

A system on a chip includes all the functionality of a system in a compact solution. Mobile computing devices typically have this.

Question 9

Hardware root of trust

Answer 9

A hardware root of trust is a known secure starting point by embedding a private key in the system. The key remains private until the public key is matched.

Question 10

DLP

Answer 10

A Data Loss Prevention (DLP) system can integrate with a mail gateway server to examine the contents of the email or attachments and determine if it can be sent. This will prevent situations like the one mentioned from occurring.

Question 11

Data at rest

Answer 11

Data at rest is when data is in some sort of persistent storage media. Examples include financial information stored in databases, archived audiovisual media, and operational policies.

Question 12

In what state is data in when It is when data is transmitted over a network.

Answer 12

Data in transit and data in motion are the same. Examples include website traffic and remote access traffic, and data being synchronized between cloud repositories.

Question 13

Which of the following is a method of securing sensitive information, such as an account number, into a random string of characters that requires no mathematical process?

Answer 13

Tokenization

Question 14

Tokenization

Answer 14

Tokenization is a database de-identification method where all or part of data in a field is substituted with a randomly generated token. The token is stored with the original value separate to the production database.

Question 15

SSL Accelerator

Answer 15

A Secure Socket Layer (SSL) Accelerator is a hardware device used to encrypt Transport Layer Security (TLS) traffic and should be placed close to the desired off-loading device.

Question 16

Full Disk Encryption

Answer 16

Full Disk Encryption provides encryption for a whole disk and protects the confidentiality of the data.

Question 17

Code Obfuscation

Answer 17

Code obfuscation is the method of disguising coding methods by way of renaming variables, replacing strings, and hiding code comments.

Question 18

physical security control designed to control access to secure areas.

Answer 18

mantrap,Mantraps provide the capability to lock a single person in an area if needed.

Question 19

a server that is intentionally left open or available, so that an attacker will be drawn to it

Answer 19

honeypot

Question 20

A security engineer is using several virtual servers accessible from the company network to lure in potential attackers. What has the security engineer created?

Answer 20

Honeynet