Exam (elaborations)
CSX EXAM QUESTIONS AND ANSWERS (GRADED A)
- Course
- Institution
CSX EXAM QUESTIONS AND ANSWERS
[Show more]
Content preview
CSX EXAM QUESTIONS AND ANSWERSCybersecurity définition - Answer -Protection of information assets by addressing threats
to information processed, stored and transported by internetworked information systems
APT Attacks - Answer -Attacks by an adversary with sophisticated levels of expertise, who
has time, patience and significant resources. Create opportunities to achieve its objectives
using multiple attack vectors.
Primary concern for security - Answer -Protection of assets from threats
Symmetric key systems - Answer -These use single, secret, bidirectional keys that encrypt
and decrypt.
Asymmetric key systems - Answer -These use pairs of unidirectional, complementary keys
that only encrypt or decrypt. Typically, one of these keys is secret, and the other is publicly
known.
Information Security - Answer -Deals with information, regardless of its format (paper
documents, digital and intellectual property in people's minds and verbal or visual
communications
Most common symmetric key system - Answer -Data Encryption Standard (DES) 56bits
plus 8 for parity checking, block cypher then replaced by AES (Advanced Encryption
Standard)
Cybersecurity - Answer -Concerned with protecting digital assets (encompassed within
network hardware, software and information that is processed, stored within isolated
systems or transported internetworked information environments)
Two main advantages to symmetric key systems - Answer -1) User has to know only one to
encrypt and decrypt
2) Less complicated, less processing power, good for bulk data encryption
Cybersecurity guide definition - Answer -Protection of information assets by addressing
threats to information processed, stored and transported by internetworked information
systems
Disadvantages of symmetric key encryption - Answer -1) Difficulty distributing keys
2) Limitations of shared secret, cannot be used to sign electronic documents or messages
, NIST identify - Answer -Use organisational understanding to minimise risks to systems,
assets, data & capabilities
digital signature ensures - Answer -Data integrity
Authentication
Authorisation
NIST protect - Answer -Design safeguard to limit the impact of potential events on critical
services & infrastructures
IPSec (Internet Protocol Security) : 2 modes for establishing encryption - Answer -1)
Transport mode : encrypts the data portion, referred as the ESP - Encapsulation Security
Payload
2) Tunnel mode : ESP and its header are encrypted
NIST detect - Answer -Implement activities to identify the occurrence of a Cybersecurity
event
Security Association (SA) - Answer -An agreement between the two IPsec peers about the
cryptographic parameters to be used in an ISAKMP (Internet Security Association and Key
Management Protocol) session.
NIST respond - Answer -Take appropriate action after learning of a security event
S/MIME (Secure/Multipurpose Internet Mail Extensions) - Answer -A protocol that
encrypts an outgoing email message and includes a digital signature.
More secure than SMTP, which does not use encryption.
NIST recover - Answer -Plan for resilience and the timely repair of compromised
capabilities and services
SET (Secure Electronic Transaction) - Answer -Protocol developped by VISA and
Mastercard to secure payment transactions
Confidentiality - Answer -Protection of information from unauthorised access or disclosure
Access controls, file permissions, encryption
Integrity - Answer -Protection of information from unauthorised modifications
Logging, digital signatures, hashes, encryption, access controls
Availability - Answer -Ensures the timely and reliable access to and use of information and
systems.
Redundancy, backups, BC management and planning
The benefits of buying summaries with Stuvia:
Guaranteed quality through customer reviews
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
Quick and easy check-out
You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.
Focus on what matters
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
Frequently asked questions
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Satisfaction guarantee: how does it work?
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Who am I buying these notes from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller millyphilip. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy these notes for $11.99. You're not tied to anything after your purchase.
Can Stuvia be trusted?
4.6 stars on Google & Trustpilot (+1000 reviews)
79373 documents were sold in the last 30 days
Founded in 2010, the go-to place to buy study notes for 14 years now