Inside Cloud & Security

Question 1

1 When you have an answer that saves human lives, it probably is the best answer

Question 2

2 What is ESP? Encapsulation security payload?

Answer 2

In cyber security, ESP most commonly refers to Encapsulating Security Payload, a core component of the IPsec (Internet Protocol Security) protocol suite. Don’t pick AH (authentication header) since it doesn’t provide encruption. ESP is responsible for providing confidentiality (encryption), data integrity (ensuring data hasn’t been tampered with), and authentication (verifying the source of the data) for network traffic. It achieves this by encrypting the actual data being transmitted (the payload) within the network packet.

Question 3

2 What should come to your mind if you have a question that says 2 networks?

Answer 3

data encryuption and site to site vpn

Question 4

6 Will implementing 2 factor authentication stop password sharing?

Answer 4

no. what difference does it make? people will still share their 2 factor also.

Question 5

6 If a question has the word “what should we do first”? Which answer choice should you pick? What should you not pick?

Answer 5

Do not pick training! It never comes first. Usually, it is policy that is the answer.

Question 6

7 What is a data owner, data custodian, and data steward?

Answer 6

Data owner>steward>custodian. Data owners are ultimately accountable for the quality, accuracy, and security of specific data assets. Data custodians are responsible for the technical implementation and maintenance of data storage, access, and security. Data stewards focus on the business rules and policies that govern data, ensuring its proper use and alignment with organizational goals.

Question 7

8 Data classification is what in the CIA triad? What about redudancy?

Answer 7

Data classification is Confidentiality, remember who can access. Redudancy is Integrity and Availability

Question 8

8 If a question ask, “ensure compliance” what does that mean?

Answer 8

It means like preventing…so it can’t be a scanning or detecting answer.

Question 9

9. What’s another word for “best minimize loss”

Answer 9

This is another word for prevention

Question 10

11 What layer does WAF work at? What about NGFW? What is difference?

Answer 10

Both Layer 7. both security tools, but they protect different aspects of a network. A WAF specializes in securing web applications from web-based attacks like SQL injection and cross-site scripting. An NGFW, on the other hand, provides broader network security, including application control, intrusion prevention, and malware protection.