D430 Fundamentals of Information Security - Set 2 - Part 3

Correct Answer: SSL/TLS

SSL (Secure Sockets Layer) and TLS (Transport Layer Security) are encryption protocols used to secure data transmission over the internet, ensuring that data remains confidential and secure between a client and server.

Correct Answer: Nonrepudiation

Nonrepudiation ensures that an individual cannot deny taking a specific action or making a particular transaction, providing proof of the origin and integrity of the action or transaction.

Correct Answer: To block and prevent malicious traffic in real time

An Intrusion Prevention System (IPS) is designed to block and prevent malicious traffic in real-time, stopping security incidents before they can cause harm to the network or systems.

Correct Answer: Penetration testing

Penetration testing simulates attacks on a system to identify vulnerabilities, assess defenses, and determine how well a system can withstand actual threats.

Correct Answer: Clickjacking

Clickjacking is an attack technique where an attacker tricks a user into clicking a hidden or disguised link or button that triggers unintended actions, such as executing malicious scripts.

Correct Answer: To create multiple layers of security controls to protect resources

Defense in depth is a cybersecurity strategy that employs multiple layers of security controls to protect resources and systems, reducing the risk of a successful attack.

Correct Answer: Attribute-Based Access Control (ABAC)

Attribute-Based Access Control (ABAC) controls access to resources based on attributes associated with the user, the resource, or the environment, allowing for more granular access control decisions.

Correct Answer: Hashing

Hashing is a cryptographic process that generates a fixed-length hash value from input data, which can be used to verify the integrity of the data by detecting any changes.

Correct Answer: Man-in-the-middle attack

A man-in-the-middle attack involves an attacker intercepting communications between two parties and impersonating one or both of them, potentially stealing or altering the information being exchanged.

Correct Answer: HIPAA

The Health Insurance Portability and Accountability Act (HIPAA) requires organizations to implement security measures to protect the confidentiality, integrity, and availability of health information, ensuring the privacy of patients' medical data.