Mastering Access Control Lists (ACLs)

Which two types of compliance are laws? Choose two answers.

Regulatory and Gramm-Leech-Bliley (GLB)

What are two common types of access control lists (ACLs)? Choose two answers.

Attribute-based and network

Which term is synonymous with symmetric cryptography?

Secret key cryptography

Which term is synonymous with asymmetric cryptography?

Asymmetric cryptography Signup and view all the answers

Which tool is used for vulnerability assessment?

Qualys Signup and view all the answers

What company audits other companies for licensing requirements?

BSA Signup and view all the answers

What are hash functions used for?

Verifying integrity of data Signup and view all the answers

Which form of access control uses CAPTCHAs?

Attribute-based access control Signup and view all the answers

Which characteristic falls under accountability?

Identity Signup and view all the answers

What is the disadvantage of logging?

Taking up storage space Signup and view all the answers

Which encryption method was named after Julius Caesar and is easily breakable?

Caesar cipher Signup and view all the answers

What jurisdiction does the General Data Protection Regulation (GDPR) regulate?

European Union Signup and view all the answers

Which act regulates the United States Department of Education?

FERPA Signup and view all the answers

Which act regulates federal departments in the United States?

FISMA Signup and view all the answers

Which act regulates customer privacy in the finance industry?

GLBA Signup and view all the answers

What are the three states of data?

Data in motion, Data at rest, Data in use Signup and view all the answers

Which type of algorithm is a symmetric key?

DES Signup and view all the answers

Which type of algorithm is an asymmetric key?

ECC Signup and view all the answers

Which two algorithms are hashing algorithms?

MD5 and SHA Signup and view all the answers

What term refers to the process of gathering and analyzing information to support business decisions?

Competitive intelligence Signup and view all the answers

What is the correct order of steps in the Operations Security Process?

<ol> <li>Identification of critical information, 2) Analysis of threats, 3) Analysis of vulnerabilities, 4) Assessment of risks, 5) Application of countermeasures</li> </ol> Signup and view all the answers

What does vulnerability analysis involve?

Identifying weaknesses that can cause harm Signup and view all the answers

What is considered the weakest link in a security program?

People Signup and view all the answers

Which social engineering technique uses electronic communications to carry out a broad attack?

Phishing Signup and view all the answers

Which law of operations security emphasizes the importance of identifying critical information?

Second law Signup and view all the answers