Review Questions

Now it's time to check your knowledge. Answer these questions and check your answers, found in the Assessment section at the end of the book:

1. What are the three components of the CIA triad?
2. Why might a CCTV camera be situated outside a building without any film inside?
3. What does confidentiality mean?
4. How can we control access of personnel to a data center?
5. What is the purpose of an air gap?
6. Name three main control categories.
7. Name three physical controls.
8. Following an incident, what type of control will be used when researching how the incident happened?
9. How do I know whether the integrity of my data is intact?
10. What is a corrective control?
11. What type of control is it when you change the firewall rules?
12. What is used to log in to a system that works in conjunction with a PIN?
13. What is the name of the person who looks after classified data and who is the person that gives people access to the classified data?
14. When you use a DAC model for access, who determines who gains access to the data?
15. What is least privilege?
16. What is the Linux permission of 764? What access does it give you?
17. The sales team are allowed to log in to the company system between 9 a.m. and 10 p.m. What type of access control is being used?
18. Two people from the finance team are only allowed to authorize the payment of checks; what type of access control are they using?
19. What is the purpose of the defense in depth model?
20. When someone leaves the company, what is the first thing we should do with their user account?
21. What do US companies that host websites in the US have to comply with if customers are based in Poland?
22. How can a company discover that their suppliers are using inferior products?
23. What is one of the most important factors between someone being arrested and their appearance before the judge in court?
24. Can you explain what the purpose of the CLOUD Act and COPOA is?
25. What is Stage C of Cloud Forensic Process 26?