INTRODUCTION – An overview of key security concepts

CIA TRIAD

1. Encrypting your email is an example of addressing which aspect of the CIA Triad?

2. You fail to backup your files and then drop your laptop breaking it into many small pieces. You have just failed to address which aspect of the CIA Triad?

3. The use of digital signatures is an example of which concept?

4. Trudy forwards a message from Alice to Bob, but changes the timestamp on Alice’s message before sending it to make it look like it came in later. This is a violation of which aspect of the CIA Triad?

ACCESS MANAGEMENT

1. Managers in the Singapore office at your company can access documents that managers in other offices cannot access, nor can non-manager employees in the Singapore office. Which two (2) access criteria types were likely involved in setting this up?

INCIDENT RESPONSE

1. In incident management, an event that has a negative impact on some aspect of the network or data is called what?

2. In incident management, a data inventory, data classification and data management process are part of which key concept?

3. Which phase of the Incident Response Process do steps like Identify cyber security incident, Define objectives and investigate situation and Take appropriate action fall into?

FRAMEWORKS AND THEIR PURPOSE

1. In the context of security standards and compliance, which two (2) of these items are goals of frameworks and best practices?

2. A company document that says employees may not do online shopping while at work would be which of the following?

3. Which three (3) of these are compliance standards that must be adhered to by companies is some industries / countries?

4. A method of evaluating computer and network security by simulating an attack on a computer system or network from external or internal threats is know as which of the following?

5. The OWASP “Top 10” provides guidance on what?

QUIZ: KEY CONCEPTS

1. Which is not part of the Sans Institutes Audit process?

2. Which key concept to understand incident response is defined as “data inventory, helps to understand the current tech status, data classification, data management, we could use automated systems. Understand how you control data retention and backup.”

3. Which is not included as part of the IT Governance process?

4. Trudy reading Alice’s message to Bob is a violation of which aspect of the CIA Triad?

5. A hash is a mathematical algorithm that helps assure which aspect of the CIA Triad?

6. A successful DOS attack against your company’s servers is a violation of which aspect of the CIA Triad?

7. Which of these is an example of the concept of non-repudiation?

8. In incident management, an observed change to the normal behavior of a system, environment or process is called what?

9. In incident management, tools like SIEM, SOA and UBA are part of which key concept?

10. Which phase of the Incident Response Process do steps like Carry out a post incident review and Communicate and build on lessons learned fall into?

11. A company document that details how an employee should request Internet access for her computer would be which of the following?

12. Which of these is a methodology by which to conduct audits?

13. Mile 2 CPTE Training teaches you how to do what?

CONCLUSION – An overview of key security concepts