Chapter 2: The Cybersecurity Cube

Which of the following are foundational principles of the cybersecurity domain? (Select 3)

• confidentiality

• authorization

• integrity

• availability

Answer explanation

Refer to curriculum topic: 2.1.1
Three foundational security principles are confidentiality, integrity and availability. 

What name is given to a storage device connected to a network?

• DAS

• NAS

• SAN

• RAID

Answer explanation

Refer to Chapter 2 - Slides 15 - Data at Rest
A network attached storage (NAS) device is a storage device connected to a network that allows storage and retrieval of data from a centralized location by authorized network users. NAS devices are flexible and scalable, meaning administrators can increase the capacity as needed.

What are the three states of data? (Choose three)

• at rest

• encrypted

• in-process

• in-transit

Answer explanation

Refer to curriculum topic: 2.3.1
The protection of the cyber world requires cybersecurity professionals to account for the safeguarding of data in-transit, in-cloud, and at rest. 

What is a method of sending information from one device to another using removable media?

Answer explanation

Refer to Chapter 2 - Slides 16 - Data In Transit
Sneaker net – uses removable media to physically move data from one computer to another

Which two methods help to ensure data integrity? (Choose two.)

• hashing

• repudiation

• availability

• data consistency checks

Answer explanation

Refer to Chapter 2 - Slides 11 - Integrity
Methods used to ensure data integrity include hashing, data validation checks, data consistency checks, and access controls. 

Which security service determines which resources a user can access along with the operations that a user can perform?

• accounting

• authentication

• authorization

• biometric

Answer explanation

Refer to Chapter 2 - Slides 8 - Confidentiality
Authorization services determine which resources users can access, along with the operations that users can perform. Authorization can also control when a user has access to a specific resource. 

Which security service verifies the identity of a user to prevent unauthorized access?

• accounting

• authentication

• authorization

• biometric

Answer explanation

Refer to Chapter 2 - Slides 8 - Confidentiality
Authentication verifies the identity of a user to prevent unauthorized access. Users prove their identity with a username or I.D

Which security service keeps track of what users do, including what they access, the amount of time they access resources, and any changes made?

• accounting

• authentication

• authorization

• biometric

Answer explanation

Refer to Chapter 2 - Slides 8 - Confidentiality

Accounting keeps track of what users do, including what they access, the amount of time they access resources, and any changes made.

What are two common hash functions? (Choose two.)

• Blowfish

• MD5

• RSA

• SHA

Answer explanation

Refer to Chapter 2 - Slides 11 - Integrity
Common hash functions include MD5, SHA-1, SHA-256, and SHA-512. These hash functions use complex mathematical algorithms. The hashed value is simply there for comparison. For example, after downloading a file, the user can verify the integrity of the file by comparing the hash values from the source with the one generated by any hash calculator.

What mechanism can organizations use to prevent accidental changes by authorized users?

• backups

• encryption

• hashing

• version control

Answer explanation

Refer to Chapter 2 - Slides 11 - Integrity
Organizations use version control to prevent accidental changes by authorized users. Two users cannot update the same object. Objects can be files, database records, or transactions. For example, the first user to open a document has the permission to change that document; the second person has a read-only version.