Current Events

Question 1

What does COPPA stand for?

Answer 1

Children’s Online Privacy Protection Act

The Rule applies to operators of commercial websites and online services (including mobile apps) directed to children under 13 that collect, use, or disclose personal information from children, and operators of general audience websites or online services with actual knowledge that they are collecting, using, or disclosing personal information from children under 13

Question 2

What was the recent PGP/ S/MIME vulnerability called?

Answer 2

eFail

The weakness, dubbed eFail, emerges when an attacker who has already managed to intercept your encrypted emails manipulates how the message will process its HTML elements, like images and multimedia styling. When the recipient gets the altered message and their email client—like Outlook or Apple Mail—decrypts it, the email program will also load the external multimedia components through the maliciously altered channel, allowing the attacker to grab the plaintext of the message.

Question 3

This famous vulnerability breaks the most fundamental isolation between user applications and the operating system. This attack allows a program to access the memory, and thus also the secrets, of other programs and the operating system.

Answer 3

Meltdown

Question 4

This famous vulnerability breaks the isolation between different applications. It allows an attacker to trick error-free programs, which follow best practices, into leaking their secrets. In fact, the safety checks of said best practices actually increase the attack surface and may make applications more susceptible

Answer 4

Spectre

Question 5

What do you know about SELinux?

Answer 5

A Linux kernel integrating SELinux enforces mandatory access control (MAC) policies that confine user programs and system servers, access to files and network resources.

Question 6

Name 3 KPI metrics for Incident management.

Answer 6

1. ) Mean Time to Repair (MTTR) - Average time between occurrence of an incident and resolution.
2. ) % of incidents solved within deadline/target
3. ) Average incident response time (in minutes)

Question 7

Name 4 KPI for Change management.

Answer 7

1. ) Number of incidents caused by changes
   2) Service Downtime caused by changes
2. ) Number of emergency changes
3. ) Number of failed changes

Question 8

Name 4 KPI for service provisioning.

Answer 8

1. ) Average time to deliver service, per service.
2. ) % of deliveries handled within the base-line time period.
3. ) Cost, per service provisioned
4. ) Customer Satisfaction