Brainscape's Knowledge GenomeTM


Top Flashcards (Certified)
All Flashcards

CCZT > Intro to SDP - Traditional Architecture Issues & SDP Solutions > Flashcards

Intro to SDP - Traditional Architecture Issues & SDP Solutions Flashcards

(78 cards)

Start Studying
1
Q

What critical issues does SDP address?

A

The changing perimeter, the IP address challenge, and the integration of security controls

SDP (Software-Defined Perimeter) is designed to enhance network security by addressing these three core issues.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is the shifting perimeter in network security?

A

The transition from fixed network perimeters to virtualized networks due to mobile and IoT devices, and cloud computing

Traditional security measures are ineffective against the dynamic nature of modern IT environments.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

How does the cloud impact network security?

A

It changes the composition of IT environments, complicating the security of physical perimeters due to factors like BYOD and remote access

The cloud introduces challenges in securing organizational resources as devices and users become more diverse.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What challenges arise from the IP address dependence in network security?

A

IP addresses do not validate user identity, making them unreliable for security

TCP/IP focuses on connectivity but lacks mechanisms for ensuring trustworthiness of endpoints.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Why is relying on IP addresses for network location problematic?

A

IP addresses are location-dependent and can change, complicating access control

Users may be assigned new IP addresses when relocating, which can lead to security vulnerabilities.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

How does SDP address the IP address challenge?

A

By securing connections while being IP address agnostic

SDP does not rely on IP addresses for authorizing access, enhancing security.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is a significant challenge in integrating security controls?

A

Achieving compliance while ensuring that disparate security controls work together effectively

Integration challenges can lead to resource-intensive processes and potential security gaps.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is required for a single point of trust for network connections?

A
  • Information about users from applications
  • Information about the network from firewalls
  • Information about devices from clients

Each of these components is essential for establishing a secure and trusted network environment.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What difficulties arise from integrating identity management with firewall access?

A

It requires routing packets to a different service, which is resource-intensive

This complexity can hinder effective security management and increase overhead.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is a consequence of allowing individual applications to control their own security posture?

A

It may lead to security catastrophes

This decentralized approach can create vulnerabilities if not managed properly.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

How does SDP simplify the management of security controls?

A

By providing a unified location for implementing and managing controls across the entire environment

This contrasts with traditional methods that utilize distributed controls, which can be inefficient.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is the primary purpose of SDP in cybersecurity?

A

To reduce cyber risk and mitigate threats.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What does CSA’s Egregious 11 refer to?

A

A list of well-known threats/cyber risks.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What are the consequences of data breaches?

A
  • Reputational damage
  • Loss of customer/partner trust
  • Loss of intellectual property
  • Regulatory implications
  • Financial expenses
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

How does SDP prevent data breaches?

A

By utilizing a drop-all firewall that drops packets not explicitly configured.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What role does SDP play in change control?

A

It provides access configured for changes only after approval.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What financial consequences can arise from inadequate cloud security architecture?

A
  • Financial loss
  • Reputational damage
  • Legal repercussions
  • Fines
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What is the core of SDP’s security architecture?

A

Authentication, authorization, and mutual factor authorization (MFA).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

How does SDP enhance visibility in cloud usage?

A

By logging all inbound activity.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What can excessive metered cloud use lead to?

A

Financial losses.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What does SDP do to mitigate phishing and social engineering attacks?

A

Integrates with domain-based message authentication and requires MFA.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What are the results of web application attacks?

A

Stolen credentials and unauthorized access to IT assets.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

How does SDP prevent ransomware?

A

By preventing the installation of unapproved software.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What does MFA help minimize the impact of?

A

Stolen credentials.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
What is a consequence of DoS attacks?
Loss of service or service disruption.
26
What type of attacks does SDP help mitigate through its MFA and SPA/drop-all approach?
Unauthorized access and data exposure.
27
What are some threats that SDP helps protect against?
* Server exploitation * Hijacking threats * Phishing * Keyloggers * Brute force attacks
28
What types of attacks can server exploitation threats include?
* DoS/DDoS attacks * Code injection attacks * Server misconfigurations/vulnerabilities
29
Which threats does SDP protect against in hijacking scenarios?
* Man-in-the-middle (MITM) attacks * Certificate forgery * DNS poisoning * Code injections
30
What does SDP enforce to ensure security logging and monitoring?
Comprehensive and continuous monitoring.
31
What is the purpose of mTLS in SDP?
To enforce cryptography requirements.
32
What does SDP require prior to accessing applications and server resources?
Authentication.
33
What does the integration of SDP with enterprise IAM do?
Reduces the attack surface.
34
What is the impact of insufficient identity and access management?
Unauthorized access and data exfiltration.
35
Fill in the blank: SDP has a _______ firewall that drops packets not explicitly configured.
[drop-all]
36
What does NAC stand for?
Network Access Control ## Footnote NAC controls what devices can connect to a network and their access levels.
37
At which layer of the OSI model does NAC typically operate?
Layer 2 (data link layer) ## Footnote NAC uses standards-based hardware like 802.1X for validation.
38
What is a primary function of NAC?
Device validation and network segment assignment ## Footnote NAC assigns devices to networks like guest, employee, and production.
39
How does SDP differ from NAC?
SDP does not require specific network hardware and supports cloud environments ## Footnote SDP integrates users and provisions device access without a dedicated network appliance.
40
What is a Virtual Private Network (VPN)?
A secure private network connection over untrusted networks ## Footnote VPNs use TLS/SSL or IPSec to establish encrypted tunnels.
41
What are the risks associated with VPNs?
* Unrestricted access to network segments * VPN servers expose the network on the internet * Increased complexity in cloud migrations ## Footnote VPNs can lead to compromised credentials and unauthorized access.
42
What does IAM stand for?
Identity & Access Management ## Footnote IAM provides a unified mechanism for validating, authenticating, and authorizing users and devices.
43
Which protocols does SDP support for IAM integration?
* LDAP * Active Directory (AD) * SAML ## Footnote These protocols enable access control and identity management.
44
What is the purpose of identity lifecycle management in IAM?
To maintain the identity lifecycle (JML process) ## Footnote It standardizes how identity information is used to control access to resources.
45
What capabilities do Next Generation Firewalls (NGFWs) have?
* Application awareness * Intrusion detection/prevention system (IDPS) * Identity awareness * VPN capabilities ## Footnote NGFWs enhance traditional firewall functionalities.
46
What are some limitations of NGFWs?
* Latency * Scalability issues * Rule complexity ## Footnote NGFWs may cause delays and require robust hardware.
47
How does SDP complement NGFWs?
By providing secure user access policies while leveraging NGFW core functions ## Footnote SDP enforces zero visibility principles with NGFW traffic inspection capabilities.
48
Fill in the blank: SDP is fundamentally based on a need to know _______.
security principle ## Footnote This principle hides unauthorized services from users.
49
True or False: NGFWs are designed to function with a zero visibility principle.
False ## Footnote NGFWs typically result in more visible and higher risk environments compared to SDP.
50
What does SDP enable in terms of access control?
Granular access rules based on business rules and telemetry data ## Footnote This ensures only authorized users on registered devices gain access.
51
What are the three core tenets of SDP?
Assume nothing, trust no one or thing, validate everything
52
What does SDP stand for?
Software-Defined Perimeter
53
What type of environments is SDP designed to secure?
Dynamic workloads in cloud mobile environments
54
What is the first core tenet of SDP?
Assume nothing
55
What is the second core tenet of SDP?
Trust no one or thing
56
What is the third core tenet of SDP?
Validate everything
57
What type of validation does SDP provide?
Software-defined, dynamic, endpoint validation
58
What paradigm does SDP use for connections?
Connection-based paradigm
59
What components are integrated into SDP?
* Firewalls * Identity and access * Session management * Encryption * Device management
60
Where can the design features of SDP be found?
CSA’s SDP Specification v214
61
Why should IP addresses not be used as anchors for network locations?
They are location-dependent and change when users relocate. ## Footnote Users’ devices are assigned new IP addresses when they move, making IP-based access unreliable.
62
What challenge does SDP address regarding IP addresses?
SDP secures connections while being IP address agnostic. ## Footnote This means it is aware of IP addresses but does not rely on them for authorizing access.
63
What is typically required for a single point of trust in network connections?
* Information about users, provided by applications * Information about the network, provided by firewalls * Information about devices, provided by the client
64
What is a significant challenge in integrating multiple security controls?
Correlating disparate streams of security data for deeper insights is resource intensive.
65
What do most DevOps teams consider as an afterthought in security?
Application layer firewalls and anti-denial of service/distributed denial of service (DoS/DDoS) protection.
66
What does SDP provide for managing controls in the environment?
A unified location for implementing and managing controls instead of traditional distributed controls.
67
What are the main threats that SDP protects against according to the document?
* Data breaches * Misconfigurations & inadequate change control * Lack of cloud security architecture & strategy * Insufficient identity, credential, access, & key management * Account hijacking * Insider threat * Insecure interfaces & APIs * Weak control plane * Metastructure/application infrastructure failures * Limited cloud usage visibility * Abuse of cloud services
68
What are the consequences of data breaches?
* Reputational damage * Loss of customer/partner trust * Loss of intellectual property * Regulatory implications * Legal and contractual liabilities
69
How does SDP mitigate data breaches?
By using a drop-all firewall that drops packets not explicitly configured.
70
What role does SDP play in change control?
It provides access configured for changes only after approval.
71
What is the result of insufficient identity, credential, access, & key management?
* Unauthorized access * Data exfiltration * Modification and deletion of data * Eavesdropping on data in transit
72
What does the core of SDP include for preventing account hijacking?
Authentication, authorization, and mutual factor authorization (MFA).
73
What is a strategy included in SDP to address insider threats?
Microsegmentation of the organizational environment to limit access on a need-to-know basis.
74
What does SDP do to provide better visibility and situational awareness?
Logs all inbound activity.
75
What is the impact of weak control planes according to the document?
Data loss, regulatory punishment, and significant business impacts.
76
How does SDP limit the impact of misconfigurations?
By hiding resources behind the gateway/controller.
77
What type of financial losses can result from abuse of cloud services?
Excessive metered cloud use.
78
Fill in the blank: SDP safeguards access to _______ and stateless firewall configurations.
stateful

CCZT (13 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions