d827 fundamentals of information security go over

Under confidentiality what process ensures that only authorized individuals or systems can access specific data or system components?

access control

access control

ensures that only authorized individuals or systems can access specific data or system components

data masking

replaces sensitive data with anonymized values to protect it from unauthorized access or misuse

what process replacers sensitive parts data with anonymized values to protect it from unauthorized access or misuse?

data masking

what process replaces sensitive data with a token data with unauthorized access or misuse?

tokenization

tokenization

The main difference is that masked data replaces or shuffles data values with random values (for example, the Xes in a Social Security number: XXX-XX-8247) while tokenization replaces the entire bit of data with a unique token (so that same Social Security number might be represented as A1B2C3D4). When authorized users need the real data, the token is de-tokenized. 

the process that user input ensures only clean, correct data enters the system

validating input

values calculated from a block of fata, such as a file or a message, to verify its integrity

checksums

checksums

are values calculated from a block of data, such as a file or a message, to verify its integrity primary used for error checking. 

converting data of any size into a fixed-length value using a mathematical algorithm

hashing

hashing

is a process of converting data of any size into a fixed-length value, called a hash or hash value, using a mathematical algorithm. 

________ and failover means having backup systems ready to take over if the main system goes down. 

redundancy

redundancy

and failover means having backup systems ready to take over if the main system goes down. 

backing up

data regularly ensures that if data is lost or corrupted it can be quickly restored. 

_________ data regularly ensures that if data is lost or corrupted it can be quickly restored. 

Backing up

modularity

design principle that breaks systems into independent, interchangeable components, simplifying maintenance testing and secure upgrades

infrastructure as code (IaC)

is the process of managing and provisioning computer data centers through machine-readable definition files, instead of hardware configuration or interactive configuration tools.

• the code in the definition files may use either scripts or declarative definitions to configure infrastructure to a desired state

• is used to manage and provision data centers through configuration files rather than hardware configuration.

• is typically used with an IaaS cloud model.

desired state

is an infrastructure as code (IaC) feature that declares an infrastructure’s final or desired state instead of configuration by a traditional step-by-step approach

IaC-managed infrastructure includes both physical equipment and associated configuration resources. Ex: Amazon Web Services (AWS) CloudFormation is an IaC.

What is used to manage and provision data centers through configuration files rather than hardware configuration?

Infrastructure as Code (IaC)

What physical resource is manageable by IaC?

virtualized server

Infrastructure as Code (IaC)

manages physical resources such as bare metal servers and virtual servers.

What does IaC use to manage physical resources and associated configuration resources?

Definition Files / playbooks

what IaC feature declares infrastructure’s final state?

desired state

overlay networks

is a virtual network abstraction layer built on top of an existing physical network infrastructure

• Many modern networks leverage at least one _____ technology to improve network performance without an additional investment in network equipment.

software defined networking (SDN)

is an overlay network technology that centralizes a network’s management and control planes

• Centralization allows for more granular traffic management and efficient resource allocation, enabling administrators to dynamically adjust to changing network conditions and demands.

• Additionally, ____ facilitates the rapid deployment and management of virtualized network functions, enhancing network flexibility and scalability.

software-defined wide area network (SD-WAN)

is a software-defined network centralizing a multilocation network’s management and control planes

• enhances secure communication by embedding security features such as encryption, intrusion prevention systems, and firewalls directly into the network's architecture.

• Such an integration facilitates the enforcement of consistent and automated security policies throughout all locations, thereby ensuring secure access to network resources and protection of data in transit.

network planes

A network's control, data, and management planes work together for network management and data transmission. The control plane is the network plane that determines how a packet is transmitted. The data plane is the network plane that transmits a packet. The management plane is the network plane that manages nodes.

An overlay network is an example of _______ because an overlay network manages and provisions network components through machine-readable definition files.

IaC (infrastructure as Code)

• An overlay network is an I____ example because an overlay network manages and provisions network components through machine-readable definition files. Many overlay network types exist.

Which network technology improves network performance by overcoming the limitations of a network's physical infrastructure?

overlay network

• overcomes the limitations of a network's physical infrastructure by applying a layer of abstraction over existing network infrastructure.

Which overlay network technology centralizes a network's management and control planes?

software defined network (SDN)

which overlay network utilizes an abstraction layer to centralize a multilocation network’s management plane?

SDWAN (software-defined Wide area network)

SDWAN extends SDN capabilities into a multilocation network. The abstraction layer SDWAN provides centralizes a multilocation network's management plane.

Software-defined visibility (SDV)

refers to technologies enabling network traffic visibility to any monitoring device regardless of the device's physical location on a network.

Which technology enables network traffic visibility to any monitoring device regardless of physical location?

Software-defined visibility SDV

Which interface type is used to integrate a cloud resource with an application and a service?

API

An application programming interface (API) is the interface type used to integrate a cloud resource with application or service. An API provides a universal interface for cloud resources, applications, and service to interact with each other.

Which attack type targets application entry points

API attack

An API is an application entry point and an API attack targets application entry points. SDV monitoring includes the many APIs cloud customers and cloud service providers use.

Which tool can identify when a cloud-based application feature deviates from industry best practices?

software defined visibility

• Software-defined visibility can identify when a cloud-based application feature deviates from industry best practices. The vast amount of data and data access requires organizations in various industries to implement best practices whenever possible.

salting

is the process of adding a unique string of characters, know as ____, to a password before hashing the password

• protects against brute-force attacks utilizing rainbow tables

rainbow table

is a precomputed table of hashes for common passwords

• enables an attacker to quickly find plain-text passwords corresponding to precomputed hash values, facilitating rapid decryption of password hashes

• enhances the security provided by hashing

what is the result of hashing a password?

a fixed-size value

hashing a password

results in the transformation of a variable-length password into a fixed-size value, known as a hash.

what type of encryption targets specific data colums?

columnar encryption

Why does salting a password make the password more difficult for a rainbow table attack to succeed?

salting increases the number of possible hash values, making pre-computation impractical

development environment or dev

is the environment where an application is created, debugged, modified, and improved

test environment, or test

is the environment where an application is tested against the application’s specification requirements

staging environment or stage

is the pre-production environment that mirrors a production environment and contains the final release version of an application

• is used for testing the installation, configs, and migration scripts and procedures

production environment or prod or live environment

is an environment where the released version of an application is deployed and made available for the application’s users

quality assurance or QA

is the process of testing an application’s various aspects, including stability, usability, security, functionality, and performance to the application’s users

provisioning

is the process of moving an application to a production environment and customizing the application configs

• includes creating users, setting permissions, and modifying application appearance

  • sometimes includes code signing

code signing

is the act of digitally signing software by the software’s publisher and guarantees that the code was not modified or corrupted since the code was signed

deprovisioning

is the process of removing an application from a production environment

• removing users’ access, systems, data within a network

software versioning

is the process of assigning names or numbers to unique states of released software

version control aka source control

is the practice of tracking and managing a software’s versions

Application provisioning is the process of moving an application to what type of environment?

production

Which security properties are guaranteed by code signing?

integrity and data origin authentication

whats the purpose of software versioning?

to distinguish between the different versions of software

elasticity

is the degree to which a system is available to adapt to workload changes by automatically provisioning and deprovisioning resources

• the goal is to match a system’s available resources tot he systems demands at any given time

• helps minimize resource costs and is commonly used in pay-per-use cloud systems

scalability

is the measure of a systems ability to handle increased demands

two types exist :

horizontal scalability

entails adding new systems to existing infrastructure

• increased the complexity of administrative tasks such as monitoring patch management and backups

vertical scalability

entails adding resources to existing systems

• memory, storage, CPUs

• easier to implement

sender policy framework SPF

is an email authentication method that ensures the sending mail server is authorized to send emails from the sender’s domain

• implemented by including SPF TXT record in a domain’s DNS record that specifies authorized email senders for the domain

• - reduces the risk of phishing attacks

domainkeys identified mail DKIM

is an email authentication method that uses digital signatures to verify that an email was sent and authorized by the owner of the sending domain

• required adding a domain’s public key to the domain’s DNS records and embedding a ____-signature header in every email send

• improves email security by verifying the sender’s identity and the integrity of the message content

• helps mitigate email-based threats such as, spoofing, tampering, and phishing attacks

DKIM-signature header

includes a digital signature that is verified by the receiving mail server using the domain’s public key

domain-based message authentication, reporting, and conformance DMARC

is an emial authentication protocol that secures email communications by verifying sender identities, while specifying actions for authentication failures, and providing reports on email delivery and integrity

• utilizes SPF and DKIM verification mechanisms to enforce and enhance email security policies

• must have SPF or DKIM in order to pass

secure coding, aka secure programming

is the practice of developing software in a way that minimizes the risk of creating software vulnerabilities

• goal is to create software that functions as intended even when the software is subjected to malicious attacks

secure coding techniques

are methods designed to improve code security

• reusing code, obfuscating code, removing dead code, and using third-party software libraries and software development kits SDKs

obfuscation or camouflage

is a secure coding technique that makes code difficult to read and harder to understand by modifying the code appearance

• doesn’t change programs functionality, but helps hide the programs logic and purpose

• helps to protect intellectual property and to prevent a program from being reversed engineered

What is the goal of secure coding?

is to create software that runs securely at all times, including when the software is under attack.

How do obfuscation techniques improve code security?

are used to modify code appearance without changing the code's functionality. Obfuscation can be used to protect intellectual property and to prevent a program from being reverse engineered.

code reuse aka software reuse

is the use of existing software to build new software

• The aim is to reduce redundancy and development time and save resources by utilizing components that have already been created within a software development process

  • APIs provide a mechanism to enable _____

Dead Code

is code that can never be executed at run-time, or is executed but whose results is never used in any other computation

third party library

is reusable software component development by an entity other than the original publisher of a software development platform reusable

• save development time and cost by promoting component-oriented software development

  • enable software developers to integrate pre-tested and reusable code with new software

software development kit SDK

is a collection of software development tools in one package

• specific to a hardware platform and operating system combo

What entity develops a third-party software library?

an entity other than the OG software publisher

how does a third-party software library save development time?

by enabling software developers to use pre-tested and reusable code

a software development kit SDK is specific to a(n)

hardware platform and OS

sandboxing

is a security practice involving the creation of a separate, isolated environment, referred to as _____

• emulates a production environment, imposes additional restrictions and integrates monitoring capabilities

code review

is the process of systematically examining code with the aim of improving code quality

• checks for correctness, readability, and understandability

dynamic code analysis aka dynamic analysis

is a code review method that examines code during the code execution

• commonly automated and is performed by using test inputs that aim to cover all possible outputs

static code analysis also known as static analysis or source code analysis,

is a code review method that examines code without executing the code

• performed by analyzing the code against a set of coding rules and can be performed manually or automated tools

manual code review

is the process of performing static code analysis by one or more code reviewers

package monitoring

is the practice of systematically tracking and managing various elements within a software project