INTRODUCTION – Protect Organizational Assets

TEST YOUR KNOWLEDGE: SAFEGUARD INFORMATION

1. What are the categories of security controls? Select all that apply.

2. Fill in the blank: A data _____ decides who can access, edit, use, or destroy their information.

3. A writer for a technology company is drafting an article about new software features that are being released. According to the principle of least privilege, what should the writer have access to while drafting the article? Select all that apply.

4. Which privacy regulations influence how organizations approach data security? Select three answers.

5. What are the three types of security controls? Select three answers.

TEST YOUR KNOWLEDGE: ENCRYPTION METHODS

1. Which of the following elements are required when using encryption? Select all that apply.

2. Which technologies are used in public key infrastructure (PKI) to securely exchange information online? Select two answers.

3. Fill in the blank: _____ encryption produces a public and private key pair.

4. An attacker gains access to a database where user passwords are secured with the SHA-256 hashing algorithm. Can the attacker decrypt the user passwords?

5. What term describes being unable to deny that information is authentic?

6. Fill in the blank: _____ is the process of transforming information into a form that unintended readers cannot understand.

7. Public key infrastructure (PKI) is a two-step process that includes the exchange of encrypted information. What other step is involved in the PKI process?

8. Fill in the blank: Hash values are primarily used to determine the _____ of files and applications.

TEST YOUR KNOWLEDGE: AUTHENTICATION, AUTHORIZATION, AND ACCOUNTING

1. What factors do authentication systems use to verify a user’s identity? Select three answers.

2. How do businesses benefit from implementing single sign-on (SSO) technology? Select two answers.

3. A retail company has one employee that’s in charge of purchasing goods, another employee that’s in charge of approving new purchases, and a third employee that’s in charge of paying invoices. What security principle is the retail company implementing?

4. What are the categories of access controls? Select three answers.

5. What credential does OAuth use to authenticate users?

6. What are the three factors of authentication? Select three answers.

7. Authorization controls are linked to two security principles. One is the principle of least privilege. What is the other?

MODULE 2 CHALLENGE

1. Which of the following examples are categories of security controls? Select three answers.

2. A paid subscriber of a news website has access to exclusive content. As a data owner, what should the subscriber be authorized to do with their account? Select three answers.

3. What do symmetric encryption algorithms use to encrypt and decrypt information?

4. A security analyst is investigating a critical system file that may have been tampered with. How might the analyst verify the integrity of the system file?

5. Which of the following steps are part of the public key infrastructure process? Select two answers.

6. What factors do authentication systems use to verify a user’s identity? Select three answers.

7. A business has one person who receives money from customers at the register. At the end of the day, another person counts that money that was received against the items sold and deposits it. Which security principles are being implemented into business operations? Select two answers.

8. What is the purpose of security controls?

9. A large hotel chain collects customer email addresses as part of a national sweepstakes. As data custodians, what are the hotel chain’s responsibilities to protect this information? Select three answers.

10. You send an email to a friend. The service provider of your inbox encrypts all messages that you send. What happens to the information in your email when it’s encrypted?

11. Fill in the blank: A _____ is used to prove the identity of users, companies, and networks in public key infrastructure.

12. What is an advantage of using single sign-on (SSO) systems to authenticate users?

13. What types of user information does an API token contain? Select two answers.

14. A customer of an online retailer has complained that their account contains an unauthorized purchase. You investigate the incident by reviewing the retailer’s access logs. Which component of the user’s session that you might review?

15. Which functions would fall under the category of operational security controls? Select two answers.

16. An employee reports that they cannot log into the payroll system with their access credentials. The employee does not recall changing their username or password. As a security analyst, you are asked to review access logs to investigate whether a breach occurred. What information are you able to review as a data custodian in this situation? Select two answers.

17. How is hashing primarily used by security professionals?

18. What is a disadvantage of using single sign-on (SSO) technology for user authentication?

19. A shipping company imports and exports materials around the world. Their business operations include purchasing goods from suppliers, receiving shipments, and distributing goods to retailers. How should the shipping company protect their assets under the principle of separation of duties? Select two answers.

20. What is the practice of monitoring the access logs of a system?

21. What is a key advantage of multi-factor authentication compared to single sign-on?

22. The main responsibility of a receptionist at a healthcare company is to check-in visitors upon arrival. When visitor’s check-in, which kinds of information should the receptionist be able to access to complete their task? Select two answers.

23. What are common authorization tools that are designed with the principle of least privilege and separation of duties in mind? Select three answers.

24. What are the two most common forms of identification used by authentication systems? Select two answers.

CONCLUSION – Protect Organizational Assets