D430 Fundamentals of Information Security - Set 5 - Part 2

Correct Answer: Eradication

Eradication involves identifying and removing malicious elements, such as malware, from a system after the threat has been contained, preventing further damage.

Correct Answer: HIPAA

The Health Insurance Portability and Accountability Act (HIPAA) governs the protection of health information and requires healthcare organizations to implement safeguards for patient data.

Correct Answer: Wireshark

Wireshark is a widely-used packet-sniffing tool that captures and analyzes network traffic, helping administrators detect potential security threats and troubleshoot network issues.

Correct Answer: ECC

Elliptic Curve Cryptography (ECC) provides strong security with smaller key sizes than other algorithms like RSA, making it efficient for mobile devices and secure communications.

Correct Answer: Denial of Service (DoS)

A Denial of Service (DoS) attack overwhelms a system with excessive traffic, preventing legitimate users from accessing resources or services and disrupting normal operations.

Correct Answer: Principle of Least Privilege

The Principle of Least Privilege ensures that users are granted only the minimum level of access necessary to perform their job functions, reducing the risk of accidental or malicious misuse of data.

Correct Answer: Intrusion Detection System (IDS)

An Intrusion Detection System (IDS) monitors network traffic and system activity in real time to detect and respond to unauthorized access or other security breaches.

Correct Answer: Asymmetric encryption

Asymmetric encryption uses a pair of keysone for encryption and one for decryptionensuring that data transmission is secure and only accessible by authorized parties.

Correct Answer: FERPA

The Family Educational Rights and Privacy Act (FERPA) protects the privacy of student educational records and grants students the right to access and request corrections to their information.

Correct Answer: Fuzzer

A fuzzer bombards applications with random inputs to stress-test them and identify security vulnerabilities that could be exploited by attackers.

Correct Answer: Mandatory Access Control (MAC)

Mandatory Access Control (MAC) is commonly used in government and military settings, where access decisions are based on security classifications and clearances.

Correct Answer: Confidentiality

Confidentiality ensures that sensitive data can only be accessed by individuals with the proper authorization, protecting it from unauthorized access and disclosure.

Correct Answer: Detective control

Detective controls are designed to detect security incidents and report them to administrators, helping organizations respond to unauthorized access or policy violations.

Correct Answer: Recovery

Recovery involves restoring systems and operations after a security incident or disaster, ensuring that the organization can resume normal business activities.

Correct Answer: Deep packet inspection firewall

Deep packet inspection firewalls analyze the actual content of network traffic, allowing them to detect and block malicious activities based on the data being transmitted.

Correct Answer: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery (CSRF) exploits a users browser by tricking it into executing unauthorized actions on a web application, often without the users knowledge.

Correct Answer: AES

The Advanced Encryption Standard (AES) is the standard cryptographic algorithm used to encrypt and secure sensitive data in the United States, including government data.

Correct Answer: Network segmentation

Network segmentation divides a network into smaller segments, limiting the spread of attacks and reducing the potential attack surface, improving overall security.

Correct Answer: Detection and analysis

Detection and analysis involve gathering information about a potential security event and determining whether it qualifies as an actual security incident that requires further response.

Correct Answer: Penetration testing

Penetration testing simulates real-world attack scenarios to identify vulnerabilities in a system, helping organizations strengthen their defenses against potential threats.