Security Fundamentals Review Day 2

Creating MD5 hash for files is an example of ensuring what?

• Confidentiality
• Availability
• Least privilege
• Integrity

Role separation improves server security by:

•  Enforcing principle of least privilege.
• Installing applications on separate hard disks.
• Physically separating high security servers from other servers.
• Placing servers on separate VLANs.

The process of restricting access to a resource to only permitted users, applications, or computer systems.

• access control

• availability

• attack surface

• authorization

The exposure, the reachable and exploitable vulnerabilities that a system or technology has.

• attack surface

• confidentiality

• attack surface analysis

• vulnerability assessment

Helps to identify the attack surface that an organization may be susceptible to.

• attack surface analysis

• defense in depth

• role separation

• attack surface

Describes a resource being accessible to a user, application, or computer system when required. In other words, availability means that when a user needs to get to information, he or she has the ability to do so.

• availability

• access control

• authorization

• attack surface analysis

The characteristic of a resource ensuring access is restricted to only permitted users, applications, or computer systems.

• confidentiality

• attack surface

• integrity

• availability

Using multiple layers of security to defend your assets.

• defense in depth
• attack surface analysis
• defense in depth
• defense in depth

An acronym that stands for Damage potential:

• DREAD
• STRIDE
• DANGER
• MUSTER

Network traffic that begins inside a network and proceeds through its routers to its destination somewhere outside of the network.

• egress traffic
• ingress traffic
• SYN flood
• defense in depth