20 Questions
What are the three pervasive principles that should influence security guidelines, standards, designs, and control decisions?
Least Privilege, Defense in Depth, Separation of Duties
In information security, how many categories of controls are there?
Three
What should security controls focus on protecting based on the states mentioned?
Sensitive information
According to the Failure Condition Principle, what capability should controls have?
Capability to be shut down gracefully and restored automatically
Which Security Control Principles describe the general requirements and objectives for any technical controls as part of risk mitigation?
Failure Condition, Modularity, Standardization
What is the purpose of the compartmentalization principle?
To establish boundaries and isolation from dissimilar entities
What is an example of implementing the modularity principle?
Designing security software with modular components such as firewalls and antivirus
What does the standardization principle aim to achieve?
Minimize the need for exceptions in applying controls across the organization
What is the primary focus of balanced operational constraints?
Balance between control strength and impact on service delivery
What does the principle of redundant configurations ensure?
Continuous network services in the event of a router failure
What is the purpose of the Failure Condition Principle?
To provide provisions for graceful shutdown and automatic restoration
What does the modularity principle allow for?
Removal or modification of safeguards as risks profile change
According to the standardization principle, what is the goal of control selection?
To build upon previous control selections to reduce complexity and maximize economic benefits
What is the purpose of compartmentalization in information security?
To isolate sensitive resources and minimize the spread of a security breach
What is the essential aspect of balanced operational constraints?
Balancing control strength and impact on service delivery
What is the primary focus of the Least Privilege principle in information security?
Limiting access rights to what is necessary for the user's role
In information security, which state of data would likely have different threats and vulnerabilities?
All states have the same threats and vulnerabilities
What is the main objective of the Separation of Duties principle in information security?
Ensuring that no single individual has complete control over a process
What is the purpose of the Security Control Principles in information security?
To describe general requirements and objectives for technical controls in risk mitigation
What is the main focus of the Defense in Depth principle in information security?
Utilizing multiple layers of security controls
Test your knowledge of fundamental security services and controls. Understand the principles that should influence security guidelines, standards, designs, and control decisions, including Least Privilege, Defense in Depth, and Separation of Duties. Explore the categories of controls: Preventative, Detective, and Responsive.
Make Your Own Quizzes and Flashcards
Convert your notes into interactive study material.
Get started for free
