Chapter 3.3

Question 1

HSM

Answer 1

A Hardware Security Module (HSM) is a device used to generate, maintain and store cryptographic keys. It can be an external device and can easily be added to a system. The HSM will maintain the integrity of the key.

Question 2

TPM

Answer 2

The Trusted Platform Module (TPM) is a hardware-based encryption solution that is embedded in the system and provides secure key storage for full disk encryption. Supports secure boot processes

Question 3

SoC

Answer 3

A system on a chip includes all the functionality of a system in a compact solution. Mobile computing devices typically have this.

Question 4

hardware root of trust

Answer 4

A hardware root of trust is a known secure starting point by embedding a private key in the system. The key remains private until the public key is matched.

Question 5

MLS

Answer 5

Multi-Level Security (MLS) is an implementation of MAC that focuses on confidentiality. A MLS operating system is able to enforce the separation of multiple classifications of information.

Question 6

Hardening

Answer 6

Hardening an Operating System (OS) is the practice of removing default values to ensure the system is more secure.

Question 7

Secure configuration of systems

Answer 7

Secure configuration of systems refers to security measures that are implemented as a way to provide protection for computer systems. Secure configurations of systems can help prevent vulnerabilities and attacks.

Question 8

FDE

Answer 8

Full Device Encryption (FDE) provides encryption for a whole disk and protects the confidentiality of the data.

Question 9

SED

Answer 9

A self-encrypting drive (SED) includes both the hardware and software to encrypt data on a drive. Keys are securely stored within for decryption. SED requires credentials to be entered for decryption.

Question 10

privacy screens

Answer 10

The use of privacy screens limits the view from a display. They can be used to protect sensitive information from being visible.

Question 11

mail gateways

Answer 11

A mail gateway examines incoming and outgoing email traffic. It can be configured to inspect email traffic for certain terms and force encryption based on policies. An email gateway can also deny email traffic that it views as vulnerable.

Question 12

URL filtering

Answer 12

A URL filter allows you to control access to websites by permitting or denying access to specific websites based on information contained in a URL list.

Question 13

EMI

Answer 13

Electromagnetic interference (EMI) are radio frequencies emitted by external sources, such as power lines that disturb signals. EMI can be avoided by the use of shielding.

Question 14

BIOS

Answer 14

Basic Input/Output System (BIOS) is a combination of hardware and software used to adjust settings in a computer.
Disabling USB ports in BIOS (Basic Input/Output System) for all workstations on the company network would turn off the ability to use a USB.

Question 15

UEFI

Answer 15

Unified Extensible Firmware Interface (UEFI) is a specification for a software program that connects a computer’s firmware to its operating system. UEFI is the replacement for BIOS (Basic Input/Output System) and has many advancements to include provisions for secure booting.

Question 16

Attestion

Answer 16

Attestation is the process of checking and validating system files during a boot process.

Question 17

patch management

Answer 17

Patch management refers to the process of maintaining and updating software applications to maintain availability. It entails testing and applying each patch as soon as they are available.

Question 18

Change management

Answer 18

Change Management is a process that involves the prevention of unauthorized changes to a system. This process protects from unwanted outages.

Question 19

incident management

Answer 19

Incident management is the process put in place to identify, analyze and correct incidents that cause downtime or disruption of services.

Question 20

EMP

Answer 20

Electromagnetic Pulses (EMP) are bursts of electromagnetic energy from sources such as lightning, high-velocity weapons, or other devices. Shielding a system can help mitigate EMP. A Faraday Cage is an example of a shielding solution.