Network Security & Architecture Flashcards

What is the role of the Information System Security Officer (ISSO) at a cleared contractor?

Answer: Implement day-to-day security operations for assigned classified systems

The ISSO supports the ISSM by carrying out routine security tasks on specific classified information systems.

What does 'continuous monitoring' mean in the RMF process?

Answer: Ongoing assessment of control effectiveness and system changes after authorization

Continuous monitoring keeps security posture current by tracking changes and reassessing controls over time.

Which risk is most associated with insider threats on a network?

Answer: Authorized users misusing access to harm or leak information

Insiders already have access, so monitoring and least privilege are key mitigations.

What is the purpose of a DMZ in network architecture?

Answer: To host public-facing services separated from the internal network

A demilitarized zone isolates exposed services so their compromise does not directly reach the internal network.

Which regulation sets security requirements for contractors in the National Industrial Security Program?

Answer: 32 CFR Part 117 (NISPOM rule)

32 CFR Part 117 codifies the NISPOM and governs safeguarding classified information in industry.

Before sanitized or disposed of, how should classified hard drives be handled?

Answer: Sanitized or destroyed using approved methods

Storage media require approved sanitization or destruction so classified data cannot be recovered.

What is the main security benefit of encrypting classified data in transit with NSA-approved cryptography?

Answer: It protects data from interception over less protected links

Approved encryption protects confidentiality when classified data crosses links that are not otherwise protected.