Chapter 2

What name is given to a storage device connected to a network?

• DAS

• NAS

• SAN

• RAID

Answer explanation

Refer to Chapter 2 - Slides 15 - Data at Rest
A network attached storage (NAS) device is a storage device connected to a network that allows storage and retrieval of data from a centralized location by authorized network users. NAS devices are flexible and scalable, meaning administrators can increase the capacity as needed.

What are the three states of data? (Choose three.)

• at rest

• encrypted

• in-process

• in-transit

Answer explanation

Refer to chapter 2 slide 14-17
The protection of the cyber world requires cybersecurity professionals to account for the safeguarding of data in-transit, in-cloud, and at rest. 

What is a method of sending information from one device to another using removable media?

• sneaker net, sneakernet

• ms teams

• wired networks

• wireless networks

Answer explanation

Refer to Chapter 2 - Slides 16 - Data In Transit
Sneaker net – uses removable media to physically move data from one computer to another

Which two methods help to ensure data integrity? (Choose two.)

• hashing

• repudiation

• availability

• data consistency checks

Answer explanation

Refer to Chapter 2 - Slides 11 - Integrity
Methods used to ensure data integrity include hashing, data validation checks, data consistency checks, and access controls. 

What service determines which resources a user can access along with the operations that a user can perform?

• accounting

• authentication

• authorization

• biometric

Answer explanation

Refer to Chapter 2 - Slides 8 - Confidentiality
Authorization services determine which resources users can access, along with the operations that users can perform. Authorization can also control when a user has access to a specific resource. 

What are two common hash functions? (Choose two.)

• Blowfish

• MD5

• RSA

• SHA

Answer explanation

Refer to Chapter 2 - Slides 11 - Integrity
Common hash functions include MD5, SHA-1, SHA-256, and SHA-512. These hash functions use complex mathematical algorithms. The hashed value is simply there for comparison. For example, after downloading a file, the user can verify the integrity of the file by comparing the hash values from the source with the one generated by any hash calculator.

What mechanism can organizations use to prevent accidental changes by authorized users?

• backups

• encryption

• hashing

• version control

Answer explanation

Refer to Chapter 2 - Slides 11 - Integrity
Organizations use version control to prevent accidental changes by authorized users. Two users cannot update the same object. Objects can be files, database records, or transactions. For example, the first user to open a document has the permission to change that document; the second person has a read-only version.

For the purpose of authentication, what three methods are used to verify identity? (Choose three.)

• something you are

• something you do

• something you have

• something you know

Answer explanation

Refer to Chapter 2 - Slides 8 - Confidentiality
The first “A” in AAA represents authentication. Authentication verifies the identity of a user to prevent unauthorized access. Users prove their identity with a username or ID. In addition, users need to verify their identity by providing one of the following as shown in Figure:
Something they know (such as a password)
Something they have (such as a token or card)
Something they are (such a fingerprint)

What is a secure virtual network called that uses the public network?

• VPN, Virtual private network

• Wireless network

• cable network

Answer explanation

Refer to Chapter 2 - Slides 20 - Technologies
Virtual Private Network (VPN) is a secure virtual network that uses the public network (i.e., the Internet). The security of a VPN lies in the encryption of packet content between the endpoints that define the VPN.

Write down 1 of the 3 foundational principles of the cybersecurity domain.

• confidentiality

• integrity

• availability

• reliability

Answer explanation

Refer to curriculum topic: 2.1.1
Three foundational security principles are confidentiality, integrity and availability.