2026 COMPREHENSIVE EXAM
◉ Network devices. Answer: Most devices on our network
infrastructure are to transfer data, not protection, like switches and
routers; their primary process is to forward that traffic to the next
location.
◉ Security requirements. Answer: The requirements of security
come from other devices like firewalls or IPS, which monitor the
traffic.
◉ Transport encryption. Answer: We can provide transport
encryption, TLS (transport layer security).
◉ IPsec. Answer: Internet protocol security
◉ Data at rest. Answer: Information and data saved on a storage
device like hard drive, SSD, flash drive, etc.
◉ Whole disk encryption. Answer: A method of encrypting all data
on a storage device.
, ◉ Database encryption. Answer: A method of encrypting the data
stored in a database.
◉ File/folder-level encryption. Answer: A method of encrypting
specific files or folders.
◉ ACL (Access Control List). Answer: A set of permissions that
determines who can access certain data.
◉ PKI (Public Key Infrastructure). Answer: A framework for
managing digital certificates and encryption keys.
◉ Digital certificates. Answer: Certificates that bind a public key
with a digital signature and details about the key holder.
◉ Certificate Authority (CA). Answer: A centralized authority that
issues and verifies digital certificates.
◉ Self-signed certificates. Answer: Certificates signed by the
organization's own CA, used internally without a public CA.
◉ Identity and Access Management (IAM). Answer: Processes that
ensure only authorized users can access important data.