Things to review based on wrong messer questions

Data Owner

accountable for specific data, so this person is often a senior officer of the organization

Data Controller

manages the processing of the data.

Data Subject

describes an individual with personal data. Payment details and shipping addresses describe personal information from a data subject.

Data Steward

manages access rights to the data

Data Processor

often a third-party that process data on behalf of the data controller

Escalation Scripting

provides methods to automate or orchestrate the escalation response when a security issues is detected

devices in each segmented VLAN can only communicate with other devices in the same VLAN

True

Jump Server

is a highly secured device commonly used to access secure areas of another network

AAA

is a common method of centralizing authentication. Instead of having separate local accounts on different devices, users can authenticate with account information maintained in a centralized database

Insecure Protocols

will transmit information in the clear, or without any type of encryption or protection

OCSP stapling

(Online Certificate Status Protocol) requires communication between the client and the issuing CA (Certificate Authority). If the CA is an external organization, then validation checks will communicate across the Internet. The certificate holder can verify their own status and avoid client Internet traffic by storing the status information on an internal server and “stapling” the OCSP status into the SSL/TLS handshake.

CSR generation

is used during the key creation process. The certificate is sent to the CA to be signed as part of the CSR.

CSR meaning

Certificate Signing Request

IPSec

is commonly used to create a VPN (Virtual Private Network) protected tunnel between devices or locations.

SCAP meaning

Security Content Automation Protocol

SCAP definition

is used as a common protocol across multiple security tools. SCAP is not used to provide an encrypted tunnel between two locations.

Exposure Factor

describes a loss of value to the organization aka used to calculate the loss of a business activity if a vulnerability is exploited

RAID meaning

Redundant Array of Independent Disks

WPA3

is an encryption protocol used on wireless networks. All data sent over a WPA3-protected wireless network will be encrypted. it provides confidentiality for all wireless data.

Collision problem in hashing is when

two different messages share the same hash. A well-designed hashing algorithm will create a unique hash value for every possible input.

Obfuscation

is the process of taking something normally understandable and making it very difficult to understand or to be seen. One common obfuscation method used by steganography is to embed a doc within an image file

One of the easiest ways for a third-party to obtain information is through an existing Internet connection.

True

UTM

acts as a traditional firewall with additional features but not used to protect web applications

The enumeration process

identifies and reports on the hardware and software installed on the laptop. If this configuration is changed, an alert can be generated.

A list of missing software patches is a common result in vulnerability patches

True

Netflow

provides a summary of network traffic, application usage, and details of network usage. Shows network traffic volumes across the environment and focus on Performance Monitoring

TPM meaning

Trusted Platform Module

TPM definition

is part of a computer’s motherboard, and it’s specifically designed to assist and protect with cryptographic functions. Full disk encryption (FDE) can use the burned-in TPM keys to verify the local device hasn’t changed, and there are security features in the TPM to prevent brute-force or dictionary attacks.

ACL definition

is a security control commonly implemented on routers to allow or restrict traffic flows through the network.

MOA meaning

Memorandum of Agreement

MOA definition

is a formal document where both sides agree to a broad set of goals and objectives associated with the partnership.

Federation

allows members of one organization to authenticate using the credentials of another organization.

MTBF meaning

Mean time Between Failures

MTBF Definition

is a prediction of how often a repairable system will fail.

DKIM

Domain Keys Identified Mail is used to publish the public key used for the digital signature for all outgoing email.

DMARC

Domain-based Message Authentication, Reporting, and Conformance) record announces the preferred email disposition if a message is identified as spam. DMARC options include accepting the messages, sending them to a spam folder, or simply rejecting the emails.

SPF

Sender Policy Framework is used to publish a list of all authorized email servers for a specific domain.

Record-level encryption

is commonly used with databases to encrypt individual columns within the database. This would store some information in the database as plaintext and other information as encrypted data

Journaling

writes data to a temporary journal before writing the information to the database. If power is lost, the system can recover the last transaction from the journal when power is restored.