Domain 2 - Chapter 1 - Protecting Security of Assets

Question 1

What is PII?

Answer 1

Personally Identifiable Information

Any information that can identify an individual.

Question 2

What is PHI?

Answer 2

Protected Health Information

Any health-related information that can be related to a specific person.

Question 3

What is proprietary data?

Answer 3

Any data that helps an organization maintain a competitive edge.

Question 4

How do you protect data at rest?

Answer 4

Symmetric encryption

Question 5

How do you protect data in transit?

Answer 5

Combination of symmetric and asymmetric encryption

Question 6

How do you protect data in use?

Answer 6

Flushing memory buffers

Question 7

What is data maintenance?

Answer 7

Ongoing efforts to organize and care for data throughout its lifetime.

Question 8

What is DLP?

Answer 8

Data loss prevention

Systems that attempt to detect and block data exfiltration attempts.

Question 9

What is a network DLP and where is it placed?

Answer 9

A network DLP scans all outgoing data looking for specific data.

Placed on the edge of the network

Question 10

What is an endpoint-based DLP?

Answer 10

Used to scan files store on a system and external devices (printers…).

Question 11

What is a process of preparing media for reuse and ensuring that the cleared data cannot be recovered using traditional recover tools?

Answer 11

Clearing

Overwriting

Question 12

What is purging?

Answer 12

Erasing data that can’t be recovered using any known methods.

Question 13

What is a DRM license?

Answer 13

A license that grants access to a product and defines terms of use.

Question 14

What is persistent online authentication?

Answer 14

(e.g. adobe cloud subscription)

Question 15

What is a CASB?

Answer 15

Cloud access security broker

software placed logically between users and cloud-based resources. Monitors all activity and enforces administrator-define security policies.