Security D430 questions with correct
answers
3DES - CORRECT ANSWERS-DES used to encrypt each block three times , each with a
different key
Access Control List - CORRECT ANSWERS-info about what kind of access certain parties are
allowed to have to a given system
Read , write , execute
Access Control Models - CORRECT ANSWERS-Discretionary ( DAC )
Mandatory ( MAC )
Rule - based
Role - based ( RBAC )
Attribute - based ( ABAC )
Accountability - CORRECT ANSWERS-Refers to making sure that a person is responsible for
their actions .
-It provides us with the means to trace activities in our environment back to their source .
-Depends on identification , authentication , and access control being present so that we can
know who a given transaction is associated with , and what permissions were used to allow
them to carry it out .
Acess Control - CORRECT ANSWERS-Allowing - lets us give a particular party access to a
given source
, Denying - opposite of gaining access
Limiting - allowing some access to our resource , only up to a certain point
Revoking - takes access away from former user
AES - CORRECT ANSWERS-uses three different ciphers : one with a 128 - bit key , one with a
192 - bit key , and one with a 256 - bit key , all having a block length of 128 bits
Asymmetric cryptography - CORRECT ANSWERS-a public key and a private key . The public
key is used to encrypt data sent from the sender to the receiver and is shared with everyone .
Private keys are used to decrypt data that arrives at the receiving end and are very carefully
guarded by the receive ( aka the public key cryptography )
Asymmetric Key Algorithms - CORRECT ANSWERS-Secure Sockets Layer ( RSA )
Elliptic Curve Cryptography ( ECC )
Pretty Good Privacy ( PGP )
Transport Layer Security ( TLS )
Attack Types - CORRECT ANSWERS-Interception
Interruption
Modification
Fabrication
Attack types and their effect - CORRECT ANSWERS-Interception is the ONLY attack that
affects on confidentiality. Interruption, modification, and fabrication affects integrity and
availability because most of the time they're impacting data.
Attribute - based ( ABAC ) - CORRECT ANSWERS-based on attributes , such as of a person ,
resource , or an environment
Auditing - CORRECT ANSWERS-the examination and review of an organization's records to
ensure accountability through technical means .
Authentication - CORRECT ANSWERS-verifying that a person is who they claim to be