Network Security & Architecture Flashcards

Which framework does DCSA use to authorize classified information systems at cleared contractor facilities?

Answer: Risk Management Framework (RMF)

DCSA applies NIST's Risk Management Framework, tailored through the DAAPM, to authorize classified systems under the NISP.

Which document describes how a classified information system at a cleared contractor will meet its security requirements?

Answer: System Security Plan (SSP)

The SSP documents the system's boundary, controls, and operating procedures and is submitted for authorization.

Who is the contractor employee primarily responsible for the overall information system security program at a cleared facility?

Answer: Information System Security Manager (ISSM)

The ISSM oversees the facility's classified information system security program and works with the FSO and DCSA.

What is the main purpose of a firewall at the boundary between an unclassified corporate network and the internet?

Answer: Controlling traffic according to defined rules

Firewalls permit or deny network traffic based on configured security rules at network boundaries.

Why must classified systems at a contractor facility generally be physically and logically separated from unclassified networks?

Answer: To prevent unauthorized transfer of classified data to lower-classification networks

Separation prevents spillage and unauthorized data flow between different classification levels.

Which security principle limits users to only the access needed to perform their job functions?

Answer: Least privilege

Least privilege restricts accounts to the minimum permissions required, reducing risk from misuse or compromise.

A user accidentally sends classified information over an unclassified email system. What is this incident called?

Answer: Spillage (data spill)

Placing classified data on a system not authorized for that classification is a spillage requiring incident response and reporting.