Security Concepts

Question 1

Principle of least privilege

Answer 1

Give people access to only the bare minimum resources needed to do their job. Requires segmenting resources appropriately from the beginning.

Question 2

Need-to-know

Answer 2

Requires a person to have both the proper authority to access resources and a valid need to do so.

Question 3

Segregation of duties (SOD)

Answer 3

A security mechanism that prevents a single role from having too much power.

Question 4

Criticality

Answer 4

The impact that the loss of an asset will have or how important the asset is to the business.

Question 5

Sensitivity

Answer 5

The impact that unauthorized access will have.

Question 6

Assurance

Answer 6

Managing security risks by keeping vulnerabilities and threats to an acceptable level.

Question 7

Total Cost of Ownership (TCO)

Answer 7

The true cost to own an asset: original cost, upgrades, maintenance, support, training…