3.1-3.2

Question 1

risk transference

Answer 1

transfer risk to third party. cyber security insurance

Question 2

compute

Answer 2

needed to run applications

using multiple cpus across multiple clouds for more computing poweradds complexit and its more scalable

Question 3

attack surface

Answer 3

all the ways to break into your network

Question 4

connectivity

Answer 4

always try to connect securely with vpn or ip sec

protect the physical cabling connections, also app level encryption and network lvl encryption

Question 5

failure mode
fail open

Answer 5

system fails but data continues to flow

Question 6

failure mode
fail closed

Answer 6

system fails but data does not flow

Question 7

active monitoring

Answer 7

ips

Question 8

passive monitoring

Answer 8

ids

Question 9

jump server

Answer 9

access secure network zones, is hardened and monitored.

ssh/vpn/tunnel to the jump server and jump to another server from there

Question 10

forward proxy

Answer 10

proxy is inside your internal network

Question 11

reverse proxy

Answer 11

traffic from internet hits your internal proxy

Question 12

open proxy

Answer 12

third party, uncontrolled can be used by anyone

Question 13

active/passive load balancer

Answer 13

some servers work some on standby

Question 14

sensors

Answer 14

ips, fw logs, authentication logs, web server access logs, database transaction logs, email logs

Question 15

collectors

Answer 15

siem consoles, ips and fw too.

compare sensor data

Question 16

software defined wan

Answer 16

cloud based apps from remote sites can talk directly to the cloud,don’t have to go through the central data center. so data center is more redundant.

Question 17

SASE

Answer 17

Secure Access Service Edge.
CLOUD BASED
“next gen vpn”
updated secure access. all delivered by a single cloud service at the network edge.