SEC401 Final Exam Questions and Answers 2024

SEC401 Final Exam Questions and Answers 2024

1. 3 Valid options for Data Protection: 1. Content Discovery - tools that help discover sensitive information in storage 2.Volume Storage Encryption - Protect volumes from being snapshotted, cloned and exposure, protects volumes from being explored by cloud provider, and prevents volumes from being exposed by physical loss of drives. 3. Object Storage Encryption - Same as volume storage encryption plus allows user to to implement VPS (Virtual Private Storage). 2. Volume Storage: This includes volumes attached to IaaS instances, typically as a virtual hard drive.Volumes often use data dispersion to support resilience and security. 3. Object Storage: Objects (files) are stored with additional metadata (content type, redundancy required, creation date, etc.). These objects are accessible through APIs and potentially through a web user interface. (example: Dropbox). 4. Types of Object Storage encryption: File/Folder Encryption, Client/Application Encryption, Proxy Encryption. 5. Data Loss Prevention (DLP): A product that, based on central policies, identify, monitor, and protect data at rest, in motion, and in use through deep content analysis. Some ways DLP is handled: 1. Data can be blocked 2. it can be allowed to proceed after the data has been appropriately encrypted 6. Data Migration to the Cloud (detection) - How do you manage unapproved data being moved to cloud services?: 2 steps to help manage unapproved data moving to cloud services: 1. Monitor Large internal data migrations with Database Activity Monitoring and File Activity Monitoring. 2. Monitor data moving to the cloud with URL filters and Data Loss Prevention tools. URL filtering allows you to monitor and prevent users connecting to cloud services. 7. Database Activity Monitoring: Captures and record all SQL activity in real time or near real time, including database administrator activity, across multiple database platforms; and can generate alerts on policy violations. 8. File Activity Monitoring: Monitor and record all activity within designated file repositories at the user level, generate alerts on policy violations. 9. Data Dispersion: A technique that is commonly used to improve data security but without the use of encryption mechanisms. Capable of providing high availability and assurance for data stored in the cloud by means of data fragmentation. 10. Data Fragmentation: a file is split into a specific number of fragments; all of these are sign and then distributed to a number of remote servers.The user then can reconstruct the file by accessing a certain number of arbitrarily chosen fragments.