D430 Fundamentals of Information Security - Set 4 - Part 2

Correct Answer: Rule-Based Access Control

Rule-Based Access Control grants or denies access based on a predefined set of rules, ensuring that access is consistent and based on specific security policies.

Correct Answer: AES

The Advanced Encryption Standard (AES) is widely used to secure both government and commercial data, offering key lengths of 128, 192, and 256 bits for robust encryption.

Correct Answer: Anomaly-based IDS

Anomaly-based intrusion detection systems (IDS) detect suspicious activity by comparing current network traffic to a baseline of normal behavior, identifying deviations that may indicate an attack.

Correct Answer: Phishing

Phishing attacks use fake emails or websites that mimic legitimate entities to trick users into providing sensitive information, such as login credentials or financial details.

Correct Answer: Incident response plan

An incident response plan is a set of policies and procedures that guide an organization's response to security incidents, helping to minimize damage and restore normal operations.

Correct Answer: Nonrepudiation

Nonrepudiation ensures that an individual cannot deny having made a specific statement or performed an action, providing proof of the origin and integrity of the action or transaction.

Correct Answer: Penetration testing

Penetration testing simulates attacks on a system to identify vulnerabilities and assess defenses, helping organizations improve their overall security posture.

Correct Answer: Attribute-Based Access Control (ABAC)

Attribute-Based Access Control (ABAC) grants or denies access based on the attributes of the user, the resource, and the environment, allowing for more granular access control decisions.

Correct Answer: Cross-Site Scripting (XSS)

Cross-Site Scripting (XSS) attacks manipulate web applications by embedding malicious code that executes in a user's browser, often leading to unauthorized actions or data theft.

Correct Answer: ECC

Elliptic Curve Cryptography (ECC) is based on elliptic curve theory and is widely used to secure communications in mobile and wireless devices, offering strong encryption with smaller key sizes.

Correct Answer: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery (CSRF) attacks misuse the authority of a user's browser to perform unauthorized actions on a web application, often without the user's knowledge.

Correct Answer: Recovery

Recovery involves restoring normal operations and functionality after a security incident or disaster, ensuring that systems and services are returned to their original state.

Correct Answer: Confidentiality

Confidentiality ensures that data can only be accessed by individuals who are authorized to view it, protecting sensitive information from unauthorized disclosure.

Correct Answer: Detective control

Detective controls are designed to detect security incidents, such as unauthorized access or policy violations, and report them to administrators for further investigation and action.

Correct Answer: HIPAA

The Health Insurance Portability and Accountability Act (HIPAA) governs the protection of health information and requires healthcare organizations to implement security measures to safeguard patient data.

Correct Answer: Clickjacking

Clickjacking involves tricking a user into clicking something other than what they intended by placing an invisible layer over a legitimate web page, leading to unintended actions.

Correct Answer: Nmap

Nmap is a network scanning tool used to detect open ports, services, and devices on a network, helping to identify potential vulnerabilities that attackers could exploit.

Correct Answer: Attribute-Based Access Control (ABAC)

Attribute-Based Access Control (ABAC) makes access decisions based on a combination of identity and environmental conditions, such as time of day, location, or device type, allowing for more flexible and dynamic access control.

Correct Answer: Defense in Depth

Defense in Depth is a security strategy that layers multiple security controls, such as firewalls, intrusion detection systems, and encryption, to protect against a wide range of threats.

Correct Answer: Digital signature

A digital signature is an encrypted code attached to a message to verify its authenticity, ensuring that the message comes from the expected sender and has not been altered.