1 Security Architecture Foundations Free Online FlashCards

What does confidentiality protect against?

Prevent unauthorized disclosure of information.

What is the security objective of integrity?

Prevent or detect unauthorized alteration or destruction.

What does availability mean in security?

Keep systems and information accessible when needed.

What do authenticity and accountability establish?

Authenticity establishes who or what performed an action; accountability preserves evidence of it.

What is the security objective of privacy?

Limit the collection, use, and disclosure of information about people.

What qualifies as an asset in security architecture?

An asset is something valuable that could be harmed, lost, exposed, or misused.

How does a supporting asset differ from a direct asset?

A supporting asset enables access to or operation of a direct asset, such as an identity service needed to access customer records.

What does a system boundary define?

A system boundary defines what is included in the system under consideration.

What makes a boundary a trust boundary?

A trust boundary is where data or control crosses between components, users, or environments with different trust assumptions.

Why can services on the same network still need a trust boundary?

A trust boundary can be logical: services on the same network may have different privileges and should not automatically trust one another.

What does a threat model represent?

A threat model structures a system’s security-relevant features, potential threats, and planned responses.

What threat categories make up STRIDE?

STRIDE stands for spoofing, tampering, repudiation, information disclosure, denial of service, and elevation of privilege.