Chapter 1: Mastering Security Basics Flashcards
Introduction to core security goals. (56 cards)
What are the three core goals of Cybersecurity?
Maintaining confidentiality, integrity, and availability. AKA CIA.
What is confidentiality?
The ability to prevent the unauthorized disclosure of information.
What is encryption?
Any number of methods that scramble data to make it unreadable to unauthorized personnel.
What are the three core identity and access control management activities of access controls?
Identification, Authentication, and Authorization.
What is Identification?
When a user claims an identity (e.g. userID, username, email).
What is Authentication?
When a user proves their identity (through something they know, something they have, something they are, or somewhere they are).
What is Authorization?
Determines what resources to grant or restrict access to based on some rules.
What is Integrity?
The various methods that prevent the unauthorized alteration of information or systems. It keeps info safe from intentional or accidental changes.
What is Hashing?
An integrity method that converts data into a fixed-size hash value to ensure data integrity, prevent tampering, and verify authenticity.
What is Availability?
The various methods that ensures authorized users are able to access information and systems when they need them.
What is Redundancy?
Adds duplicates of critical systems to provide FAULT TOLERANCE.
What is Fault Tolerance?
The ability for a system to continue functioning despite the failure of one or more components.
What are Disk Redundancies?
A method of storing the same data in multiple locations to ensure data availability and fault tolerance in case of hardware failure.
What are Server Redundancies?
Additional standby/backup servers can continue to make services available when the operating server fails.
What are Network Redundancies?
Adding additional bandwidth support in case any network path fails.
What are Power Redundancies?
Adding backup power sources in case commercial power fails (e.g. uninterruptible power supplies aka UPSs).
What is Scalability?
The ability to increase the capacity of your system/service in the face of increasing demand.
What is Horizontal Scalability?
Increasing the capacity of system/services by adding more servers to existing infrastructure.
What is Vertical Scalability?
Increasing the capacity of system/services by adding more resources to pre-existing servers (e.g. such as RAM, CPU power, storage, etc).
What is Elasticity?
The automation of scalability by having systems add/remove resources as needed.
What is Patching?
A process that ensures that systems stay available by keeping them up-to-date with patches that resolve bugs that can compromise CIA.
What is Resiliency?
The ability for a system to heal itself/recover from faults with minimal downtime.
What is the difference between high availability and resiliency?
High availability is proactive by keeping services alive continuously whilst resiliency is reactive by accepting failure might happen but prepares itself to recover quickly from them.
What is Risk?
The possibility of a threat exploiting a vulnerability resulting in a loss.
