Bundle for IT Security: Defense against the digital dark arts tests compilation | question a nd answers | verified

In the CIA Triad, "Confidentiality" means ensuring that data is: - not accessible by unwanted parties; "Confidentiality," in this context, means preventing unauthorized third parties from gaining access to the data. In the CIA Triad, "Integrity" means ensuring that data is: - accurate and w...

What is an attack vector? - A mechanism by which an attacker can interact with your network or systems Disabling unnecessary components serves which purposes? Check all that apply. - Reducing the attack surface, closing attack vectors What's an attack surface? - The combined sum of all attack v...

What does CIA stand for? - Confidentiality, Integrity, Availability What is the CIA triad? - A guiding principle to help develop security policies in the workplace and at home. Confidentiality - -keeping the data you have hidden from unwanted eyes Examples: -passwords Integrity - -keeping our ...

How is hashing different from encryption? - Hashing operations are one-directional. Hash functions, by definition, are one-way, meaning that it's not possible to take a hash and recover the input that generated the hash. Encryption, on the other hand, is two-directional, since data can be both en...

Why is normalizing log data important in a centralized logging setup? - Uniformly formatted logs are easier to store and analyze. Logs from various systems may be formatted differently. Normalizing logs is the practice of reformatting the logs into a common format, allowing for easier storage and ...

How is authentication different from authorization? - authentication is verifying an identity, authorization is verifying access to a resource; Authentication is proving that an entity is who they claim to be, while authorization is determining whether or not that entity is permitted to access res...

Why is normalizing log data important in a centralized logging setup? its difficult to analyze abnormal logs log normalizing detects potential attacks the data must be decrypted before sending it to the log server uniformly formatted logs are easier to store and analyze - its difficult to analyz...

What are some examples of security goals that you may have for an organization? Check all that apply. - to prevent unauthorized access to customer credentials to protect customer data from unauthorized access; These are super important goals. Safeguards or systems should be implemented to help ac...