module 7 Flashcards
1
Q
ISO 27001requirment #10 for cryptography
A
to ensure proper and effective use of cryptography to protect the confidentiality, authenticity, and/or integrity of information
2
Q
what are protection methods for PCI DSS requirement #3 (data at rest)
A
protection methods such as: encryption truncation masking hashing are critical components
3
Q
PCI DSS requirement number #4 (data in motion)
A
encrypt transmission of sensitive data across open, public networks.
4
Q
NIST publication that focuses on encryption processes for data at rest is what publication
A
800-111
5
Q
NIST guidelines for TLS is what publication
A
800-77
6
Q
NIST guidelines for IPsec VPN is what publication
A
800-113
7
Q
what is CE
A
covered entity
8
Q
what is BA
A
business associates
9
Q
what is PHI
A
personal health information
10
Q
in what function do we see security at rest in the NIST cybersecurity framework
A
protect
