D430 Fundamentals of Information Security - Set 3 - Part 2

Correct Answer: Attribute-Based Access Control (ABAC)

Attribute-Based Access Control (ABAC) bases access decisions on the attributes of the user, resource, and environment, allowing for more granular access control compared to role-based or discretionary models.

Correct Answer: Clickjacking

Clickjacking involves placing an invisible layer over legitimate content on a web page, tricking users into clicking something they did not intend to, which can lead to unauthorized actions or data breaches.

Correct Answer: Incident response plan

An incident response plan is a critical component of a security policy that outlines the steps and actions to be taken in the event of a security breach or incident to mitigate damage and restore normal operations.

Correct Answer: HIPAA

The Health Insurance Portability and Accountability Act (HIPAA) protects the privacy of health information and requires healthcare organizations to implement security measures to safeguard patient data.

Correct Answer: Network-based IDS

A network-based intrusion detection system (NIDS) is designed to monitor and analyze traffic at the network level, identifying suspicious activity or potential attacks based on patterns or signatures.

Correct Answer: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery (CSRF) tricks a trusted server into executing unauthorized actions by sending malicious requests from the users browser, exploiting the trust between the user and the server.

Correct Answer: Recovery

Recovery is the process of restoring systems to their normal operational state after a security incident or disaster, ensuring that affected systems and services are fully functional again.

Correct Answer: Digital signatures

Digital signatures are cryptographic techniques used to authenticate the sender of a message and ensure that the message has not been altered, providing both authenticity and integrity.

Correct Answer: SOX

The Sarbanes-Oxley Act (SOX) mandates regular audits and assessments for publicly traded companies to ensure accurate financial reporting and prevent financial fraud.

Correct Answer: Packet sniffer

A packet sniffer is a software tool that intercepts and analyzes network traffic, helping network administrators diagnose issues or identify potential security threats by examining the data passing through the network.

Correct Answer: Rule-Based Access Control

Rule-Based Access Control grants or denies access based on predefined rules, rather than user discretion, ensuring that access decisions are consistent and based on specific policies.

Correct Answer: Security auditing

Security auditing involves monitoring security logs, systems, and activities to detect suspicious behavior, policy violations, or potential security incidents, allowing organizations to respond and mitigate risks.

Correct Answer: Denial of Service (DoS)

A Denial of Service (DoS) attack floods a target system with excessive traffic or requests, overwhelming its resources and making it unavailable to legitimate users.

Correct Answer: RSA

RSA is an asymmetric cryptographic algorithm that uses a public and private key pair for generating secure digital signatures and encrypting data, providing strong security for data transmission and authentication.

Correct Answer: GLBA

The Gramm-Leach-Bliley Act (GLBA) regulates the handling of personal financial information by organizations, requiring transparency in data-sharing practices and the implementation of security safeguards.

Correct Answer: Authentication

Authentication in cybersecurity ensures that the source of a message or data is verified as trusted and that the information has not been altered during transmission.

Correct Answer: Network segmentation

Network segmentation involves dividing a network into smaller, isolated segments, each with its own security controls, to prevent unauthorized access and limit the spread of attacks.

Correct Answer: Hashing

Hashing is a cryptographic technique that generates a unique, fixed-length value (hash) from an input message, allowing the integrity of the data to be verified by detecting any changes to the original message.

Correct Answer: Eradication

Eradication is the process of identifying and removing all traces of malicious activity from a system, ensuring that the root cause of the security incident has been completely eliminated.

Correct Answer: SOX

The Sarbanes-Oxley Act (SOX) requires publicly traded companies to establish internal controls and reporting procedures to ensure the accuracy of financial reporting and prevent fraudulent activities.