1.0 · 12% of the exam

General Security Concepts

Controls, the CIA triad, non-repudiation, and the cryptographic tools you are expected to pick under a short scenario. Smallest domain, and the one Objective Maps opens first.

• 1.1 · FoundationalA warehouse installs badge readers on the cage door so a person without a badge cannot enter the parts room. Which control type is the reader, and which purchase would still block entry if the reader lost power?
• 1.2 · AppliedA clinic keeps a second copy of the charting system in another building so nurses can still open schedules when the primary storage shelf fails. Which leg of the CIA triad is this purchase mainly protecting?
• 1.2 · FoundationalA finance lead denies approving a wire. The approval email was signed with her private key, and the signature verifies. Which security property lets you reject the denial?
• 1.4 · AppliedYou must encrypt 40 GB of disk images before they go to an offsite shelf. A colleague suggests encrypting each image directly with the company’s RSA public key. What should you use instead, and why?
• 1.4 · FoundationalA developer wants to store customer passwords ‘so support can decrypt them if the customer forgets.’ Which design should you reject that sentence for?