Security Best Practices

What term refers to the security measure that protects data in its static state, typically stored on a physical device?

• Data in motion

• Data at rest

• Data in use

• Data in transit

Which term describes a security concept that involves giving users the minimum levels of access – or permissions – they need to perform their job functions?

• Principle of least interest

• Principle of least privilege

• Principle of least concern

• Principle of least authority

What is the process of converting plaintext into a coded form to prevent unauthorized access called?

• Decryption

• Authentication

• Encryption

• Authorization

Which term is used to describe the process of verifying the identity of a person or device before allowing access to a system?

• Authorization

• Validation

• Encryption

• Authentication

What is encryption?

• The process of proving a user's identity.

• The practice of giving users only the resources needed to perform their job.

• Any data that is not currently being accessed.

• The process of converting cleartext, or unencrypted, data into an unreadable format by using a special key and mathematical algorithm.

What does 'data at rest' refer to?

• The process of converting data into an unreadable format.

• Any data that is not currently being accessed.

• The practice of giving users only the resources needed to perform their job.

• The process of proving a user's identity.

What is authentication?

• The practice of giving users only the resources needed to perform their job.

• Any data that is not currently being accessed.

• The process of converting data into an unreadable format.

• The process of proving a user's identity.

What is the principle of least privilege?

• The process of converting data into an unreadable format.

• Any data that is not currently being accessed.

• The practice of giving users only the resources needed to perform their job.

• The process of proving a user's identity.

Which of the following is NOT listed as a component of secure workstations?

• Data encryption

• Password creation

• End user best practices

• Biometric authentication

What is a best practice for securing workstations as depicted in the image?

• Regular software updates

• Encryption

• Strong password policies

• Anti-virus software