The CIA Triad - ANSWER (Confidentiality, Integrity, Availability) - The fundamentals of
security, sometimes referenced as the AIC Triad
Confidentiality - ANSWER Prevent disclosure of information to unauthorized
individuals or systems.
Ex: Encryption, Access controls, Two-factor authentication
Integrity - ANSWER Data is stored and transferred as intended.
Ex: Hashing, Digital signatures, Certificates, and Non-repudiation
Availability - ANSWER Information is accessible to authorized users
Ex: Redundancy, Fault tolerance, Patching
Non-repudiation - ANSWER You can't deny what you've said; Sign a contract; Adds a
different perspective for cryptography
Proof of Integrity - ANSWER Verify data does not change; In cryptography, we use a
hash; If the data changes, the hash changes; Doesn't necessarily associate data with an
individual
Proof of Origin - ANSWER Prove the message was not changed; Prove the source of
the message; Make sure the signature isn't fake; Sign with the private key; Verify with the
public key
1
, AAA Framework - ANSWER Authentication, Authorization, and Accounting
Certificate Authority (CA) - ANSWER Device or software that is responsible for
managing all the certificate in our environment.
Authorization Models - ANSWER The use or device has now authenticated; Put an
authorization model in the middle; Users and services -> Data and applications.
No Authorization Models - ANSWER User -> Resources; Does not scale
Using an Authorization Model - ANSWER Reduce Complexity; Support any number of
users or resources; Easy to understand the authorizations
Gap Analysis - ANSWER Where you are compared with where you want to be; May
require extensive research; Can take weeks or months
Ex: Choosing the framework; Evaluate people and processes; Compare and contrast; The
analysis and report
Zero Trust - ANSWER Nothing is inherently trusted; Everything must be verified
Ex: Multi-factor authentication; Encryption; System permissions; additional firewalls;
monitoring and analytics; Least Privilege Access
Planes of operation - ANSWER Split the network into functional planes (Applies to
physical, virtual, and cloud components)
Data Plane - ANSWER Processes the frames, packets, and network data.
Ex: Processing, forwarding, trunking, encrypting, NAT
Control Plane - ANSWER Manages the actions of the data plane; Define policies and
rules; Determines how packets should be forwarded
2
security, sometimes referenced as the AIC Triad
Confidentiality - ANSWER Prevent disclosure of information to unauthorized
individuals or systems.
Ex: Encryption, Access controls, Two-factor authentication
Integrity - ANSWER Data is stored and transferred as intended.
Ex: Hashing, Digital signatures, Certificates, and Non-repudiation
Availability - ANSWER Information is accessible to authorized users
Ex: Redundancy, Fault tolerance, Patching
Non-repudiation - ANSWER You can't deny what you've said; Sign a contract; Adds a
different perspective for cryptography
Proof of Integrity - ANSWER Verify data does not change; In cryptography, we use a
hash; If the data changes, the hash changes; Doesn't necessarily associate data with an
individual
Proof of Origin - ANSWER Prove the message was not changed; Prove the source of
the message; Make sure the signature isn't fake; Sign with the private key; Verify with the
public key
1
, AAA Framework - ANSWER Authentication, Authorization, and Accounting
Certificate Authority (CA) - ANSWER Device or software that is responsible for
managing all the certificate in our environment.
Authorization Models - ANSWER The use or device has now authenticated; Put an
authorization model in the middle; Users and services -> Data and applications.
No Authorization Models - ANSWER User -> Resources; Does not scale
Using an Authorization Model - ANSWER Reduce Complexity; Support any number of
users or resources; Easy to understand the authorizations
Gap Analysis - ANSWER Where you are compared with where you want to be; May
require extensive research; Can take weeks or months
Ex: Choosing the framework; Evaluate people and processes; Compare and contrast; The
analysis and report
Zero Trust - ANSWER Nothing is inherently trusted; Everything must be verified
Ex: Multi-factor authentication; Encryption; System permissions; additional firewalls;
monitoring and analytics; Least Privilege Access
Planes of operation - ANSWER Split the network into functional planes (Applies to
physical, virtual, and cloud components)
Data Plane - ANSWER Processes the frames, packets, and network data.
Ex: Processing, forwarding, trunking, encrypting, NAT
Control Plane - ANSWER Manages the actions of the data plane; Define policies and
rules; Determines how packets should be forwarded
2
