Security+ Lesson 1: Fundamental Security Concepts

What is the CIA triad?

Confidentiality, Integrity, and Availability

What is Non-repudiation?

Non-repudiation means that a person CANNOT deny doing something

What is the definition of Confidentiality as it refers to the CIA triad?

Information can only be read by people who have been explicitly authorized to access it

What is the definition of Integrity as it refers to the CIA triad?

The data is stored and transferred as intended, and any modification is unauthorized unless explicitly authorized through proper channels

What is the definition of Availability as it refers to the CIA triad?

That information is readily accessible to those authorized to view or modify it

What are the 5 functions of the cybersecurity framework developed by NIST?

Identify, protect, detect, respond, and recover

What is a Gap analysis?

A process that identifies how an organization’s security systems differ from those required or recommended by a framework

What is Access Control?

Access control governs how subjects (people) may interact with objects (systems)

What is IAM?

Identity and Access Management

What are the 4 principles of IAM?

Identification, Authentication, Authorization and Accounting

What is Identification (IAM)?

creating an account or ID that uniquely represents the user, device, or process on the network.

What is Authentication (IAM)?

Proving a user is who or what they say they are

What is Authorization (IAM)?

What rights a user has on each resource and enforcing those rights

What is a Security Control?

A security control is designed to give a system or data asset the properties of confidentiality, integrity, availability, and non-repudiation

What are the 4 categories of Security Controls?

Managerial, Operational, Technical, Physical

What are the 3 main Security Control Functional Types?

Preventative, detective, and corrective