Security & Compliance Flashcards

Which protocol is used to securely transport SNMP data in modern network management systems?

Answer: SNMPv3

SNMPv3 provides authentication and encryption, making it the secure choice for network management traffic.

A system integrator is deploying an ICS environment. Which security framework is specifically designed for industrial control systems?

Answer: IEC 62443

IEC 62443 is the international standard series specifically addressing cybersecurity for industrial automation and control systems.

In a zero-trust architecture, what happens when a device passes initial authentication but its posture check fails?

Answer: Access is denied or quarantined

Zero-trust continuously validates device posture, and a failed posture check results in denied or restricted (quarantined) access regardless of identity authentication.

What is the primary purpose of a Security Information and Event Management (SIEM) system in an integrated environment?

Answer: Centralize log collection and correlation for threat detection

A SIEM aggregates and correlates log data from multiple sources to detect security incidents and support compliance reporting.

Which encryption standard is currently recommended by NIST for protecting sensitive government data?

Answer: AES-256

NIST recommends AES-256 as the current standard for encrypting sensitive and classified information.

A CSI must ensure data integrity in transit between subsystems. Which mechanism best achieves this?

Answer: Digital signatures or HMAC

Digital signatures and HMAC (Hash-based Message Authentication Code) verify that data has not been tampered with during transmission.

What does the concept of 'least privilege' mean in the context of system integration security?

Answer: Users receive the minimum access rights needed to perform their job

Least privilege limits user and system access to only the permissions required for their specific role, reducing the attack surface.