Chapter 16 - Managing Security Operations

Question 1

Define the difference between need to know and the principle of least privilege.

Answer 1

Need to know focuses on permissions and the ability to access information, whereas the principle of least privilege focuses on privileges. Privileges include both rights and permissions. Both limit the access of users and subjects to only what they need. Following these principles prevents and limits the scope of security incidents.

Question 2

Define patch management process

Answer 2

Evaluate patches
Test patches
Approve the patches
Deploy the patches
Verify that patches are deployed

Question 3

Key elements of configuration management

Answer 3

Configuration management isn’t about preventing change but ensuring the integrity of IT resources by preventing unauthorised or improper changes.

According to the Official ISC2 guide to the CISSP exam, a good CM process is one that can:

(1) accommodate change;
(2) accommodate the reuse of proven standards and best practices;
(3) ensure that all requirements remain clear, concise, and valid;
(4) ensure changes, standards, and requirements are communicated promptly and precisely; and
(5) ensure that the results conform to each instance of the product.

Question 4

A Private cloud.

Answer 4

The cloud infrastructure is provisioned for exclusive use by a single organization comprising multiple consumers (e.g., business units). It may be owned, managed, and operated by the organization, a third party, or some combination of them, and it may exist on or off premises.

Question 5

Which of the following is used to create parity information?

Answer 5

RAID level 2 the parity information is created using a hamming code that detects errors and establishes which part of which drive is in error?

Question 6

VSAN

Answer 6

Systems with extra disk space can be used to aggregate all their disk space for use as storage system to augment or replace file server capacity.

Question 7

VSAN

Answer 7

Systems with extra disk space can be used to aggregate all their disk space for use as storage system to augment or replace file server capacity.

Question 8

Archive bit for backup methods

Answer 8

Archive bit 1 = On (the archive bit is set).

Archive bit 0 = Off (the archive bit is NOT set).

Question 9

Data striping

Answer 9

Data striping is the technique of segmenting logically sequential data, such as a file, in a way that access of sequential segments are made to different physical storage devices.

Question 10

Different RAID levels

Answer 10

RAID 1 - Mirroring
RAID 3 - Byte level parity
RAID 4 - Block level parity
RAID 5 - Interleave parity