CyberSec (03 handout 1 IT infrastructure)

Refers to any group of users, workstations, devices, printers, computers, and database servers that share different types of data via network resources.

This covers all the users that have access to the other domains.

It is a computer of an individual user where the production takes place.

This contains all of the workstation, hubs, switches, and routers. This is also a trusted zone.

It consists of the Internet and semi-private lines.

It is the boundary between the trusted and untrusted zones. The zones are filtered with a firewall.

This domain is made up of user-accessed servers such as e-mail and database.

User Domain Risk (Find wrong ans)

Workstation Domain (Find wrong ans)

Lan Domain (Find wrong ans)

Wan Domain (Find wrong ans)

LAN/Wan Domain (Find wrong ans)

System/Application Storage Domain (Find wrong ans)

Remote Access Domain (Find wrong ans)

Is defined as a sub-network that is made up of servers and clients-each of which is controlled by a centralized database.

Is a communications network that spans a large geographic area such as cities, states, or countries. It can be private to connect parts of a business, or it can be more public to connect smaller networks.

Enables remote users to access files and other system resources on any devices or servers that are connected to the network at any time, increasing employee productivity and enabling them to better collaborate with colleagues around the world.

Access strategy also gives organizations the flexibility to hire the best talent regardless of location, remove silos, and promote collaboration between teams, offices, and locations.

Was developed as a way to enable remote users and branch offices to log into corporate applications and other resources securely.

A piece of software called "VPN client" is installed in the end user's computer and is configured with details about the target network, such as the gateway IP address and a pre- shared security key.

Is a common encryption technology that is widely used to provide secure communication on the Internet.

Is a relatively new player to the remote access arena that was not developed by a firewall manufacturer

This consists of all of a business' mission-critical systems, applications, and data.

It is important to ensure that this domain is secure at all times. Otherwise, a business could easily lose large amounts of sensitive information as well as face the threat of having productivity come to a halt.

ERP meaning

System/Application attacks are generalized into three (3) categories: (Find wrong ans)

This can be defined as "gaining access to a physical entity or area without permission from an administrative figure."

This threat is especially dangerous when the targets are sensitive areas such as computer rooms, data centers, or wiring

This is nearly identical to unauthorized physical access, except it is not limited to tangible data.

This is a flaw that exists in the programming of a software component or system that allows a malicious attacker to gain unauthorized access to that system through an exploit.

These vulnerabilities can be exploited through malicious software known as "malware" that is accidentally executed on the system by a user or more directly exploited by an attacker.

Are similar to software vulnerabilities on non-server systems with the exception that software vulnerabilities that can exist on servers have the potential to be even more damaging.

Includes any information stored digitally on a computing system or network.

Occurs when any stored data is destroyed.

Considered the greatest risk to the system/application domain because the goal of these systems is to allow users to create, store, retrieved, and manipulate data.

The most common preventative measure is to perform backups of all data.

(Find right ans) Reducing Risk, the following suggestions should be taken into consideration to reduce risks associated with the system/application domain:

(Find wrong ans) Reducing Risk, the following suggestions should be taken into consideration to reduce risks associated with the system/application domain:

Refers to the code of responsible behavior on the Internet.

(Find right ans) Considerations when determining responsible behavior

(Find wrong ans) Considerations when determining responsible behavior

(Find right ans) Ethics Manifesto by Gerd Leonhard focuses on five (5) specific human rights that he believes could be endangered if people don't have an ethical framework to guide them.

(Find wrong ans) The Code of Ethics for Information Security Professional is derived from the Unified Framework for Information Security Professionals, which emphasizes these three (3) core ethic values: