Security Concepts

Question 1

Data in Transit

Answer 1

Data in Transit → Also called data in motion; information actively moving across a network. Protected using Transport Layer Security (TLS) or Internet Protocol Security (IPsec).

Question 2

Data at Rest

Answer 2

Data at Rest → Stored information protected through encryption such as full disk, database, or file-level encryption.

Question 3

PKI

Answer 3

Public Key Infrastructure (PKI) → A framework of hardware, software, and policies that manage digital certificates and encryption keys.

Question 4

Digital Certificates

Answer 4

Digital Certificates → Electronic credentials issued by a Certificate Authority (CA) to verify the identity of entities and enable encrypted communications.

Question 5

CA

Answer 5

Certificate Authorities (CA) → Trusted organizations that issue and manage digital certificates in a Public Key Infrastructure (PKI).

Question 6

Self-Signed Certificates

Answer 6

Self-Signed Certificates → Certificates signed by the entity that created them instead of a trusted Certificate Authority (CA); often used internally.

Question 7

IAM

Answer 7

Identity and Access Management (IAM) → A framework that defines and manages user access rights and authentication to systems and data.

Question 8

Least Privilege

Answer 8

Least Privilege → A security principle where users and systems are granted only the minimum access needed to perform their tasks.

Question 9

RBAC

Answer 9

Role-Based Access Control (RBAC) → An access control model where permissions are assigned to roles, and users inherit permissions through their role.

Question 10

Geographic Restrictions

Answer 10

Geographic Restrictions → Security controls that allow or deny access based on physical or IP-based location.

Question 11

CCTV

Answer 11

Closed-Circuit Television (CCTV) → A security system that uses cameras for continuous video monitoring of physical spaces.

Question 12

Door Locks

Answer 12

Door Locks → Physical security controls such as conventional, deadbolt, electronic, token-based, biometric, or multi-factor locks that protect restricted areas.