D430 Fundamentals of Information Security - Set 2 - Part 2

Correct Answer: Denial of Service (DoS)

A Denial of Service (DoS) attack overwhelms a system with excessive traffic or requests, causing it to become unavailable to legitimate users due to resource exhaustion.

Correct Answer: Availability

Availability ensures that data and systems are accessible to authorized users when needed, protecting against disruptions such as system failures or denial of service attacks.

Correct Answer: HITECH

The Health Information Technology for Economic and Clinical Health (HITECH) Act governs the use of electronic health records (EHR) in the U.S. and promotes the adoption of health information technology.

Correct Answer: Firewall

A firewall is a hardware or software mechanism that enforces access controls by filtering incoming and outgoing network traffic, blocking unauthorized traffic while allowing legitimate traffic through.

Correct Answer: Data at rest encryption

Data at rest encryption protects sensitive data stored on devices such as hard drives or cloud storage by encrypting it, preventing unauthorized users from accessing it even if they gain physical access to the device.

Correct Answer: Brute force attack

A brute force attack is a method used to crack encrypted data by trying every possible combination of keys or passwords until the correct one is found, potentially allowing unauthorized access.

Correct Answer: GDPR

The General Data Protection Regulation (GDPR) is a data privacy and protection framework developed by the European Union that sets strict guidelines for organizations handling personal data of EU citizens.

Correct Answer: Social Engineering

Social engineering is an attack technique that uses psychological manipulation to deceive individuals into divulging confidential information or performing actions that compromise security.

Correct Answer: Format string attack

A format string attack occurs when certain print functions within a programming language are exploited to manipulate or view internal memory, potentially compromising the security of an application.

Correct Answer: Burp Suite

Burp Suite is a web application security assessment tool that helps detect vulnerabilities such as SQL injection or cross-site scripting (XSS) by analyzing and testing web applications for security flaws.

Correct Answer: Symmetric cryptography

Symmetric cryptography uses the same key for both encryption and decryption of data, making it faster and more efficient for large-scale data encryption compared to asymmetric cryptography.

Correct Answer: Risk assessment

Risk assessment involves identifying and evaluating security vulnerabilities and threats to determine the most appropriate countermeasures to mitigate risks.

Correct Answer: Principle of least privilege

The principle of least privilege restricts users to the minimum access level they need to perform their tasks, reducing the risk of accidental or intentional misuse of systems and data.

Correct Answer: Cross-site scripting (XSS)

Cross-site scripting (XSS) is an attack where malicious scripts are embedded into a trusted web page, and when the user accesses the page, the browser executes the malicious scripts.

Correct Answer: Nmap

Nmap is a powerful tool used for network scanning to discover open ports, services, and hosts in a network, helping administrators assess security vulnerabilities.

Correct Answer: Race condition

A race condition occurs when multiple threads or processes access the same resource simultaneously without proper synchronization, leading to unpredictable or undesired results.

Correct Answer: Data in motion encryption

Data in motion encryption refers to protecting data while it is being transmitted across a network by encrypting it, ensuring that it cannot be intercepted or accessed by unauthorized parties.

Correct Answer: RSA

RSA is an asymmetric encryption algorithm that uses a pair of keys, a public key for encryption and a private key for decryption, to secure data transmission and ensure data confidentiality.

Correct Answer: PCI DSS

The Payment Card Industry Data Security Standard (PCI DSS) mandates that organizations handling credit card transactions follow specific security protocols to protect cardholder data from breaches.

Correct Answer: Discretionary Access Control (DAC)

In Discretionary Access Control (DAC), users have the authority to grant or deny access to objects they own, giving them control over who can access their resources.