Chapter 5

Question 1

What physical security control describes a means that systems and cables from the classified network never physically touch systems and cables from the unclassified network.

Answer 1

Air Gap

Question 2

What are three different ways to add data to a classified network?

Answer 2

Using a USB device
Unidirectional Network Bridge
Technical Guard Solution

Question 3

What method is a combination of hardware and software placed between two networks to transfer data?

Answer 3

Technical Guard Solution

Question 4

What data transfer method describes connecting two networks but only allows the data to travel in only one direction?

Answer 4

Unidirectional Network Bridge

Question 5

What term refers to the ongoing efforts to organize and care for data throughout its lifetime?

Answer 5

Data Maintenance

Question 6

What is placed on the edge of the network and can scan all outgoing data and prevent sensitive data from leaving the org.

Answer 6

Network-Based DLP

Question 7

What is usually placed on a system within an org, and can scan files sent to external devices, and store on a system to block unauthorize files from being on a sys or leaving a system.

Answer 7

Endpoint-Based DLP

Question 8

What NIST SP focuses on guidelines for media sanitizations?

Answer 8

NIST SP 800-88 Rev 1

Question 9

What describes unused space within a disk cluster?

Answer 9

Slack Space

Question 10

What is the best way to remove data remanence on a hard drive?

Answer 10

Degaussing

Question 11

What is the best way to remove data remanence on a solid-state drive?

Answer 11

Destruction

Question 12

What describes the use of IT resources without the approval or knowledge of the IT department?

Answer 12

Shadow IT

Question 13

What method results in less stringent requirements with GDPR and can prevent data from directly identifying an entity.

Answer 13

Pseudonymization

Question 14

What method is commonly used with ecommerce sites and credit card processors to protect users’ credit card data.

Answer 14

Tokenization

Question 15

What NIST SP focuses on security control baselines?

Answer 15

NIST SP 800-53 Rev 5

Question 16

What NIST SP includes a comprehensive list of security controls and has identified many of them to include in various baselines.

Answer 16

NIST SP 800-53B

Question 17

What is part of the baseline tailoring process and refers to reviewing a list of baseline security controls and selecting only those controls that apply to the IT systems you’re trying to protect.

Answer 17

Scoping