Security Architecture 2

Question 1

What is physical isolation?

Answer 1

• Phisically isolating parts of the system from each other
• Air Gar: Between two routers or switches
• No mixing of data

Question 2

What is SDN?

Answer 2

Software defined Networking
* Approach that uses software based controller or APIs to direct traffic on network and communicate with underlying hardware structure

Planes of Operation

Infrastructure layer / Data plane
* frames and packets
* forwarding, trunking, encrypting, NAT

Control layer / Control Plane
* Manages actions of data plane
* Routing tables, session tables
* Dynamic routing protocol updates

Application layer / management plane
* Configure and manage device
* SSH
* Browser API

Question 3

What is on-premises security?

Answer 3

All Data and System is managed within and from the Organization

Question 4

Pros and Cons of Centralized approach

Answer 4

Pro
* Correlated alerts
* Consolidated log file analysis
* Comprehensive system status and maintanance/patching

Contra
* Single point of failure
* Potential performance issues

Question 5

Explain Virtualization

Answer 5

• Different OS running on the same Hardware

Infrastructure
Physical device such as data center or server
Hypervisor
Software managing resources between VM´s
Guest OS
Seperate for every machine
Applications
Are on top of every OS

Question 6

What is Containerization

Answer 6

Way of packing, distributing and running code or application in a consistent environment

Container
* Encapsulates application alongside with dependencies and runtime environment

Dockers
* Platform to manage containers

Question 7

What is SCADA / ICS

Answer 7

Supervisory Control and Acquition system

• Large-scale mutiside industrial control system
• PC manages all equitment
• Extensive segmentation

Used for
* Power generation
* Refining
* Energy
* Logistics

Question 8

What is RTOS?

Answer 8

Real Time operating system

• Manages tasks strictly on priority level
• Used for military environments
• Industrial Equitment

Question 9

What are Embedded Systems

Answer 9

Pourpose build systems - build for one specific function such as:

• Traffic light controllers
• Digital watches
• Medical systems

Question 10

What means resilience and MTTR

Answer 10

• How quickly can we recover a system

MTTR
Mean time to recover

Question 11

What is Ease of deployment?

Answer 11

Many moving parts of application to be taken into consideration
* Web servers
* Data Base
* Caching server
* Firewall