AAA Cybersecurity

Question 1

What is AAA in cybersecurity?

Answer 1

Authentication
Authorization
Accounting

Question 2

What is authentication?

Answer 2

A process of verifying the identity of a user, machine, or system by validating the credentials provided by the entity against the stored data

Question 3

What are 5 methods of authentication?

Answer 3

Knowledge
Possession
Inherence
Location
Behavior

Question 4

What is the difference between single, two, and multi factor authentication?

Answer 4

Authentication that uses one, two or multiple categories of authentication factors.

Question 5

What is Single Sign-On (SSO)?

Answer 5

An authentication method that allows users to log in with a single ID to any of several related, yet independent, software systems

Question 6

What are the 4 types of authorization models in a system?

Answer 6

Discretionary Access Control (DAC)
Role-based Access Control (RBAC)
Mandatory Access Control (MAC)
Rule-based Access Control

Question 7

What is authorization?

Answer 7

Process that comes after authentication and involves granting or denying
permissions to authenticated users

Question 8

What is accounting?

Answer 8

Also known as auditing, a critical process that involves the systematic tracking and recording of user activities on a system or network

Question 9

What are 3 methods of accounting?

Answer 9

Logs
Tracking
Web Browsing History

Question 10

What is non-repudiation?

Answer 10

Used to provide assurance of the integrity and origin of data by preventing an entity from denying the authenticity of their actions

Question 11

What are 4 methods of non-repudiation?

Answer 11

Video-based mechanisms
Biometric data
Digital signatures
Receipts

Question 12

What is encryption?

Answer 12

Process of converting readable data, known as plain text, into an unreadable format, known as cipher text, using an algorithm (known as a cipher) and an encryption key

Question 13

What is symmetric encryption?

Answer 13

Also known as private-key encryption, uses the same key for both the encryption and decryption processes

Question 14

What is asymmetric encryption?

Answer 14

Also known as public-key Cryptography, uses two different keys: a public key for encryption and a private key for decryption

Question 15

What is the public key infastructure?

Answer 15

Framework for managing digital certificates
and public-key encryption and provides a
way to create, distribute, store, and revoke
digital certificates and manage public-key
encryption

Question 16

What is a digital signature?

Answer 16

Created by using the sender’s public key to
encrypt a digital hash of the message being
sent and can be verified by anyone with the
sender’s private key

A method of confirming the data is absolutely going to the right place, and been received by the right person

Question 17

What is a cryptographic hash?

Answer 17

Takes an input and returns a fixed-size string of bytes, typically a hash value

A fingerprint of the data that you are sending

Question 18

What is data at rest?

Answer 18

Data at Rest refers to data that is stored on physical or digital media and is not
actively being moved or processed e.g. on SSD’s

Question 19

What are 4 methods of protecting data at rest?

Answer 19

Regular Audits
Encryption
Access Controls
Physical Security

Question 20

What is data in transit?

Answer 20

Also known as data in motion, refers to data that is being transferred over a network