Section 4.1 Flashcards
What does CIA stand for?
Confidentiality, Integrity, and Availability
Define Confidentiality
Information is kept safe from unauthorized individuals
Define Integrity
Information is true and unaltered
Define Availability
Information is accessible at all times
How do you maintain Confidentiality?
encryption
access controls
authentication
network security
physical security
steganography
training
How do you maintain Integrity?
hashing
digital signatures
certificates
How do you maintain Availability?
Redundancies, Load Balancing, Patching
Define Zero Trust
no user is trusted by default
What is a Threat?
A person or thing that could take advantage of a vulnerability
What is a Vulnerability?
A weakness in a system or a network that can be exploited by a threat.
What is an Exploit?
When a threat takes advantage of a vulnerability
RBAC
Role Based Access Control
What is Defense in Depth?
The utilization of multiple methods and layers of defense to minimize attack surface
What is Separation of Duties?
No one person has all of the access or knowledge
What are 3 way to protect a network interface?
port security (MAC address filtering)
802.1X (NAC) which requires authentication
manual deactivation of port by administrator
What does NAC stand for and what does it do?
Network Access Control
Requires authentication when plugging into a switch
Where does authentication take place?
locally or separate authentication server.
What are the common remote authentication protocols?
RADIUS, TACACS+, LDAP, Kerberos
What is the advantage of using Kerberos vs the other authentication protocols?
allows Single Sign On (SSO)
CVE
Common Vulnerabilities and Exposures
What are CVEs?
documented and cataloged vulnerabilities in software and hardware
CIA
Confidentiality, Integrity, Availability
What is Least Privilege?
users have minimum access necessary to perform their job
What’s the IEEE standard for NAC?
802.1X
