Chapter 7 - Confidentiality and Privacy

Question 1

What three things should you see when reviewing the efficiency of a training and education program on confidentiality and privacy?

Answer 1

1. Have a document policy that aligns with current procedures
2. Conduct regular training sessions
   3.maintains records to track employee participation and compliance

Question 2

What is a common attack against hashes? Define it

Answer 2

Collision attack - allows bad actors to create different inputs that result in the same hash value

Question 3

What is SSH

Answer 3

1. Called secure shell
2. method for secure remote communications from one computer to another.
3. Provides strong authentication and secure channel over internet or unsecured networks

Question 4

Transport Layer Security

1. What does it protect
2. What does it authenticate

Answer 4

protect the confidentiality and integrity of data in transit.

Authenticates web server or both then server and client

Question 5

A digital envelope uses what type of encryption?

Answer 5

Asymmetric and symmetric encryption

Question 6

Performing regular audits and checking system logs are examples of what?

Answer 6

Reactive measures

• detect ongoing crimes and crimes that have already been committed

Question 7

Digital signatures use what?

Answer 7

Hashing and asymmetric encryption

Question 8

What helps the autior understand how a carved out org communicates to subcompany in Soc 2

Answer 8

Orgs contractual agreement