Section 1: Fundamentals of Security

Question 1

Act of protecting data and information from unauthorized access, unlawful modification and disruptions, disclosure, and corruption, and destruction.

Answer 1

Information Security

Question 2

Act of protecting the systems that hold and process the critical data. i.e computer, server, network device, smartphone, etc.

Answer 2

Information Systems Security

Question 3

Comprises the three pillars of information security that experts use to identify and reduce vulnerabilities in security systems.

Answer 3

CIA Triad

Question 4

Ensures that information is only accessible to those with the appropriate authorization

Answer 4

Confidentiality

Question 5

Ensures that data remains accurate and unaltered unless modification is required.

Answer 5

Integrity

Question 6

Ensures that information and resources are accessible and functional when needed by authorized users

Answer 6

Availability

Question 7

Concept that ensures that a party cannot deny the authenticity of their actions in a digital transaction

Answer 7

Non-repudiation

Question 8

three processes that make up a security framework for cybersecurity.

Answer 8

Authentication, Authorization and Accounting - AAA

Question 9

Process of verifying the identity of a user or system.

Answer 9

Authentication

Question 10

Determines what actions or resources a user can access.

Answer 10

Authorization

Question 11

Act of tracking user activities and resource usage, typically for audit or billing purposes.

Answer 11

Accounting

Question 12

Measures or mechanisms put in place to mitigate risks and protect the confidentiality, integrity, and availability of information systems and data.a set of security measures that limit who can access an organization’s data and resources.

Answer 12

Security Controls

Question 13

Security model that operates on the principle that no one, whether inside or outside the organization, should be trusted by default.

Answer 13

Zero Trust

Question 14

part of a network that controls how data packets are forwarded — meaning how data is sent from one place to another.

Answer 14

Control Plane

Question 15

Also called the forwarding plane and it forwards the packets. Is more like the cars that drive on the roads, stop at the intersections, and obey the stoplights.

Answer 15

Data Plane

Question 16

Anything that could cause harm, loss, damage, or compromise to information technology systems. Come from external sources.

Answer 16

Threat

Question 17

Any weakness in the system design or implementation. They come from internal factors, such as software bugs, misconfigured software, improperly protected network devices, missing security patches, lack of physical security. These are within our control.

Answer 17

Vulnerabiliy

Question 18

Finding different ways to minimize the likelihood of an outcome occurring and achieve the desired outcomes.

Answer 18

Risk Management

Question 19

Refers to the protection of information from unauthorized access and disclosure.

Answer 19

Confidentiality

Question 20

What are the 5 methods to ensure confidentiality

Answer 20

Encryption, Access Control, Data Masking, Physical Security, and. Training Awareness.

Question 21

This concept is important to achieve because of 3 main reasons; protect personal privacy, maintain a business advantage, and achieve regulatory compliance.

Answer 21

Confidentiality

Question 22

Concept which is important for ensuring data accuracy, maintain trust, and ensure system operability.

Answer 22

Integrity

Question 23

Number one way that your are going to see the maintenance of integrity for all the data, software, and networks.

Answer 23

Hashing

Question 24

Process of converting data into fixed-sized value. Resulting of a fixed-length string of bits called hash digest.

Answer 24

Hashing

Question 25

Method to verify the integrity of data sent during a transmission.

Answer 25

Checksums

Question 26

Ensures that only authorized individuals can modify data and reduce the risk of unintentional or malicious alterations.

Answer 26

Access Controls

Question 27

Reviewing logs and operations to ensure that only authorized changes have been made and any discrepancies are addressed.

Answer 27

Regular audits

Question 28

Duplication of critical components or functions of a system with intention of enhancing its reliability. For example, having a spare tire in your car in case the one you have gets puncture.

Answer 28

Redundancy

Question 29

4 types of redundancy.

Answer 29

Server, Data, Network and power.

Question 30

Redundancy type. Involves using multiple servers in a load balance so that if one fails, the other servers can take over the load to continue supporting end users.

Answer 30

Server Redundancy

Question 31

Redundancy type. Involves storing data in multiple places.

Answer 31

Data Redundancy

Question 32

Redundancy type. Ensures that if one network path fails, the data can travel through another route.

Answer 32

Network Redundancy

Question 33

Redundancy type. Involves using backup power sources to ensure that an organization's systems remain operational during periods of power disruption or outages within a local service area.

Answer 33

Power Redundancy

Question 34

A mathematical protocol that uses cryptographic techniques to verify the authenticity and integrity of digital messages or documents.

Answer 34

Digital Signature

Question 35

What are the five commonly known authentication methods.

Answer 35

Something you know, have, are, do and somewhere you are.