ISC2 Domain 5: Security Operations

What are the 6 stages to the data life cycle?

1. Create

2. Store

3. Use

4. Share

5. Archive

6. Destroy

What is something which every security policy should have?

Consequences for non-compliance

What type of phishing attacks target highly placed officials or private individuals with sizable assets?

Whaling attacks

Why is asymmetric encryption considered more secure?

it involves a unique code for the sender and receiver

What is meant by the term rollback?

Restoring the system to its previous state before change

What are the 3 steps in the change management process?

1. Request for Change (RFC)

2. Approval

3. Rollback

What is ingress monitoring?

survelliance and assesment of all inbound communications traffic and access attempts

What is egress monitoring?

regulate data leaving the organization’s IT environment

What does DLP stand for?

Data loss prevention

What is symmetric encryption?

both decryption and encryption use the same key

What is a mode of encryption which ensures confidentiality efficiently, with a minimum amount of processing overhead?

Symmetric

True/False Logs should always be stored separately from he system they’re logging

True

What is asymmetric encryption?

different keys for encryption and decryption

What is a process and discipline used to ensure that the only changes made to a system are those that have been authorized and validated?

Configuration Management

What does AUP stand for?

Acceptable Use Policy

The organization’s privacy policy should stipulate which information is considered ________?

PII/ePHI

______ ______ are part of implementing controls to protect classified information.

Security Labels

Information and data should be kept only for as long as it is beneficial, no more and no less

Retention

What is Data that might be left on media after deleting?

Remanence

Clearing the device or system, which usually involves writing multiple patterns of random values throughout all storage media such as main memory, registers and fixed disks.

overwriting/zeroizing