7 Practical Security Architecture Free Online FlashCards

What does confidentiality protect?

Confidentiality means only authorized people and systems can access information.

What does integrity ensure?

Integrity means information and systems remain accurate and are changed only in authorized ways.

What does availability ensure?

Availability means authorized users can access systems and information when needed.

What is the principle of least privilege?

Least privilege grants each user or system only the access needed for its tasks.

How do preventive, detective, and recovery controls differ?

Preventive controls try to stop unwanted events, detective controls reveal them, and corrective or recovery controls limit impact and restore service.

What does zero trust assume about network location?

Zero trust does not treat network location as proof of trust; access decisions verify the user or service, device and context, and requested resource.

How can network segmentation limit a compromise?

Network segmentation limits communication between groups of systems and can reduce how far a compromised device can reach.

Where should an application enforce authorization?

Applications should enforce authorization on the trusted server for every request; hiding an interface button is not access control.

How do encryption and a plain hash differ?

Encryption is used to keep data confidential. A hash can help detect changes, but a plain hash alone does not prove who created the data.

What can message authentication codes and digital signatures provide?

Message authentication codes and digital signatures can provide integrity and authenticity, subject to their respective key-management assumptions.

What key-management practices help protect cryptographic keys?

Cryptographic keys should be securely stored and access-controlled, with plans for rotation and retirement.

What is a secure configuration baseline used for?

A secure configuration baseline records approved system settings. Check deployed systems against it, document and approve exceptions, and track changes.