CIA, non-repudiation, authentication.

Question 1

What does confidentiality ensure? Examples?

Answer 1

It ensures that unauthorized individuals are NOT able to gain access to sensitive information.
Ex: Firewalls, access control lists, encryption.

Question 2

What does integrity ensure? Examples?

Answer 2

It ensures that there are no unauthorized modifications to info or info systems.
Ex: Hashing (used for authentication) , Integrity monitoring solutions.

Question 3

What does availability ensure? Examples?

Answer 3

It ensures that info and systems are ready to meet the needs of legitimate users.
Ex: Fault tolerance (ability for system to continue to operate), clustering, backups

Question 4

What is nonrepudiation? Examples?

Answer 4

We have proof of integrity and can confirm that info receive is from original party.
Ex: Your signature, you really did sign the contract

Question 5

What is proof integrity? How’s it accomplish?

Answer 5

Any data that’s received we can verify it is the same data that was originally sent. Using a hash.

Question 6

What is proof of origin? How can it be accomplish?

Answer 6

Verify the person that sent the data to us By using digital signature.

Question 7

Proves the message was not changed?
Proves the source of the message?
Makes sure the signature isn’t fake?

Answer 7

1. Integrity
2. Authentication
3. Non-repudiation

Question 8

What key is used to encrypt a hash?

Answer 8

Private key

Question 9

What key is used to decrypt a digital signature?

Answer 9

Public key

Question 10

What is the AAA framework?

Answer 10

1. Authentication
2. Authorization
3. Accounting, refers to login time, data sent and received, logout time.

Question 11

How can you truly authenticate a device?

Answer 11

Put a digitally signed certificate on a device

Question 12

Device or software that’s responsible for managing all certificates in our environment is known as-

Answer 12

CA (Certificate of Authority)

Question 13

What is an authorization model?

Answer 13

function of specifying rights/privileges for accessing resources

Question 14

What is gap analysis? And what are the steps?

Answer 14

Study of where we are versus where we would like to be.
1. Create a baseline, end goal?
2. get a baseline of employees
3. Evaluate current IT systems/policies
4. Compare, find out weaknesses, how to compensate
5. Create final document, what’s discovered, pathway to move forward.