Network Security & Architecture Flashcards

What is a cross-domain solution (CDS) used for?

Answer: Controlled transfer of information between networks of different security domains

CDS are approved devices that enforce controlled data flow between different classification domains.

Which action is required when a cleared contractor detects a suspected intrusion on a classified information system?

Answer: Report it promptly through the proper channels to DCSA

Security incidents on classified systems must be reported promptly to the cognizant security office.

What does network segmentation accomplish?

Answer: Divides a network into isolated zones to limit lateral movement

Segmentation confines compromises and enforces access controls between zones.

A Protected Distribution System (PDS) is designed to protect what?

Answer: Unencrypted classified cabling from physical tampering or interception

A PDS provides physical protection for unencrypted classified signal lines that pass through areas of lower control.

Which practice best reduces risk from known software vulnerabilities on an authorized system?

Answer: Applying patches through an approved configuration management process

Patching under change control fixes vulnerabilities without invalidating the system's authorized baseline.

Why are personal wireless devices typically restricted in areas where classified information is processed?

Answer: They can transmit or record classified information

Personal electronics with radio, camera, or microphone capabilities risk unauthorized transmission or recording of classified data.

Which term describes ensuring information is accurate and has not been altered improperly?

Answer: Integrity

Integrity protects data from unauthorized modification.