Network Security & Architecture Flashcards

What is the purpose of audit logging on a classified information system?

Answer: Recording user and system activity for accountability and review

Audit records support accountability, detecting misuse, and investigating incidents.

Which term describes using multiple layered security controls so the failure of one does not expose the whole system?

Answer: Defense in depth

Defense in depth layers physical, technical, and administrative controls to reduce risk.

What does TEMPEST primarily address?

Answer: Compromising electromagnetic emanations from equipment

TEMPEST countermeasures prevent classified information from leaking through electromagnetic or acoustic emanations.

Before a newly installed classified system may process classified information, what must occur?

Answer: It must receive authorization from the Authorizing Official (DCSA)

Classified systems must be authorized by the cognizant authority before processing classified data.

Which of the following is a recommended practice for removable media used on classified systems?

Answer: Treat and mark media at the highest classification of data it has held

Media must be marked and protected at the highest level of information it contains or has contained until properly sanitized.

What is the primary function of an intrusion detection system (IDS)?

Answer: Monitor for and alert on suspicious or malicious activity

An IDS monitors network or host activity and generates alerts when it detects potential attacks or policy violations.

Which authentication approach is strongest for accessing a classified system?

Answer: Multifactor authentication

Combining two or more factors greatly reduces the risk from a stolen or guessed credential.