Security Plus 701 Mega Challenge 1

Match the Mobile Device Terms to their Respective Definitions.

• CYOD

• A Software that is installed on a mobile device that gives a company control over corporate data stored on the device.

• COPE

• Company purchases and issues device that can only be used for business purposes.

• MDM

• Employee brings any device that they own and can use it for business and personal use.

• COBO

• Employee chooses a device from a list of acceptable devices published by the company.

• BYOD

• Company purchases and issues device that can be used for business and for personal use.

Match the following terms to their definitions.

• Jailbreaking

• Installing unverified software onto a mobile device that would typically be restricted.

• Sideloading

• Removing the software restrictions from a mobile device.

• NAC

• A technology we can use to keep all data on a mobile device safe in the event that it is stolen or lost.

• FDE

• A system that can be used to scan mobile devices for health conditions before it connects to a network.

• Remote Wipe

• A command a company can send to an employee device to remove corporate data.

Match the Access Control Models to the correct Pointer Word.

• DAC

• Access Control rights are determined by a set of rules and mandates.

• ABAC

• Access Control rights are determined by several varying factors and properties.

• RuBAC

• Access Control rights are determined security labels and security levels.

• RBAC

• Access Control rights are at the discretion of a human.

• MAC

• Access Control rights are determined by an employees position or title.

Match the following Account Controls to the correct definitions.

• MFA

• A setting that will lock an account after an action.

• Impossible Travel Time (ITT)

• A configuration that will check the geographic distance between two account logins.

• PAM

• Manages domain admin accounts by limiting permissions, and prevents Pass-the-Hash Attack.

• Least Privilege

• Ensures users have only the accesses needed to perform their job.

• Account Lockout

• Ensures users are using more than one way to authenticate, increasing security.

Match the following terms with the most appropriate definition.

• Jump Server

• Term for a piece of equipment that is no longer receiving patch updates or support from the manufacturer.

• Microservices

• This automates infrastructure deployment using code, making server provisioning faster.

• EOL

• Best architecture to use for maximum redundancy for critical systems.

• IaC

• The benefits of this architecture include enhanced scalability and compartmentalization.

• Cloud-Native

• Best option for giving a contractor secure access to an internal system.

Match the correct terms to the appropriate definitions.

• Data-in-Transit

• Removing data from drives in a repeatable manner. Helps prevent data recovery by hackers.

• Data-in-Use

• Data that is actively being transmitted between two points.

• Sanitization

• The process of verifying that all data has actually been removed from a device.

• Certification

• Data that is being stored, or has been archived.

• Data-at-Rest

• Data that is being processed by a program or application.

Match the following.

• Data tokenization

• Best way to protect PII data in a test environment using obfuscation.

• Data Classification

• Best way to protect credit card data that is being stored in a database from theft.

• Data Protection Officer

• Best way to protect data being transmitted over the internet.

• Encryption

• The process of identifying what data falls into what categories.

• Data Masking

• Keeps a data inventory of all data that our company collects.

Match the following certificate terms.

• CSR

• Authority that issues a digital certificate to a company.

• CA

• The service/protocol that checks to see if a certificate is on the CRL.

• CRL

• The master certificate that must be installed in order for the certificate process to work.

• Root Certificate

• This is used to identify certificates that are no longer valid or have expired.

• OCSP

• To replace a SSL certificate, you would create a new one of these.

Match the following documents to their appropriate terms.

• BIA

• Legal contract between two parties that determines what they are not allowed to disclose.

• NDA

• A plan that helps a company maintain its continuity of operations in the event of an attack.

• AUP

• A document that outlines the specific financial and operational impacts of a situation. occurring

• DRP

• A plan that helps a company maintain its continuity of operations in the event of a disaster (ie: tornado).

• BCP

• Policy that states how an employee can use an IT asset at a company.

Match the following documents to their appropriate definitions.

• MOU

• A discussion based exercise we use to revise and strengthen our IRP.

• TTX

• A statement the covers the timeline of a project, how much it will cost to perform, and what the work will include.

• Simulated Failover

• A non-legal document that covers a basic understanding of a business relationship.

• IRP

• A plan that outlines how an organization responds to an attack on the organization.

• SOW

• A type of exercise we use to test the readiness of a disaster recovery hot site.