CISSP® Certification Domain 3: Security Architecture and Engineering Video Boot Camp for 2022 - Media storage

The video tutorial emphasizes the importance of offsite backups, detailing the necessary conditions for storage facilities, such as climate control and security measures. It highlights the need for asset tracking and data retention policies, ensuring compliance and protection of data. The tutorial also covers hardware hardening and network security, including the importance of patching and securing IoT devices. Finally, it discusses USB port security and the implementation of a layered defense strategy to prevent unauthorized access and malware introduction.

Why is it important to store backup data offsite?

• To save space in the main facility

• To ensure data can be restored if the main facility is compromised

• To reduce costs associated with data storage

• To comply with international data storage laws

What is a major risk of storing backup tapes in a small server room?

• They could be damaged by humidity

• They might be stolen by employees

• They are vulnerable to unauthorized access

• They might be accidentally deleted

What should be included in an asset tracking system?

• Only the serial numbers of devices

• Detailed information about each asset, including its location and status

• Only the purchase date of each asset

• A list of all employees

What is the purpose of hardware hardening?

• To increase the lifespan of devices

• To ensure devices are secure before connecting to the network

• To reduce the cost of maintenance

• To make devices faster

Why is it important to patch IoT devices?

• To make them compatible with other devices

• To increase their processing speed

• To ensure they are not vulnerable to security breaches

• To improve their battery life

What is a benefit of disabling USB ports on devices?

• It increases the storage capacity of devices

• It reduces the need for technical support

• It makes devices run faster

• It prevents unauthorized data transfer

What is a common oversight in hardware security?

• Forgetting to update software

• Not hardening workstations and wireless access points

• Ignoring the need for antivirus software

• Failing to back up data regularly