Assets and Threats: Quiz 2

What you need to understand is that protecting data depends on where that data is and what it's doing. Security teams protect data in three different states: in u______, in tra________, and at re________.

Data in ? is data being accessed by one or more users. Imagine being at a park with your laptop

Data in ? is data traveling from one point to another. While you're signed into your account, a message from one of your friends appears. They sent you an interesting article about the growing security industry. You decide to reply, thanking them for sending this to you. When you click send, this is now an example of data in ?.

Data at ? is data not currently being accessed. In this state, data is typically stored on a physical device. An example of data at ?would be when you finish checking your email and close your laptop. You then decide to pack up and go to a nearby cafe for breakfast. As you make your way from the park towards the cafe, the data in your laptop is at ?.

There are three main categories of cloud-based services:

sof___________as a service (SaaS)

pla____________ as a service (PaaS)

infra_____________ as a service (IaaS)

???? refers to front-end applications that users access via a web browser. The service providers host, manage, and maintain all of the back-end systems for those applications. Common examples of ???? services include applications like Gmail™ email service, Slack, and Zoom software.

???? refers to back-end application development tools that clients can access online. Developers use these resources to write code and build, manage, and deploy their own apps. Meanwhile, the cloud service providers host and maintain the back-end hardware and software that the apps use to operate. Some examples of ???? services include Google App Engine™ platform, Heroku®, and VMware Cloud Foundry.

???? customers are given remote access to a range of back-end systems that are hosted by the cloud service provider. This includes data processing servers, storage, networking resources, and more. Resources are commonly licensed as needed, making it a cost-effective alternative to buying and maintaining on premises.

Since data is stored in the cloud and accessed over the internet, several challenges arise:

misc__________ is one of the biggest concerns. Customers of cloud-based services are responsible for configuring their own security environment. Oftentimes, they use out-of-the-box configurations that fail to address their specific security objectives.

Cloud-native brea___________ are more likely to occur due to misconfigured services.

Monitoring acc___________ might be difficult depending on the client and level of service.

Meeting regulatory stand___________ is also a concern, particularly in industries that are required by law to follow specific requirements such as HIPAA, PCI DSS, and GDPR.

Some common risk categories might include, the da______, disc_______, or loss of infor________.