Network Security & Architecture Flashcards

In Intelligence Fundamentals Professional Certification, what is the PRIMARY purpose of network segmentation?

Answer: To limit the spread of security breaches and control access between network zones

Network segmentation limits the lateral movement of attackers and controls access between different network zones, reducing the potential impact of security breaches.

Which authentication method provides the STRONGEST security for IFPC implementations?

Answer: Multi-factor authentication combining something you know, have, and are

Multi-factor authentication (MFA) provides the strongest security by requiring multiple independent verification methods, making unauthorized access significantly more difficult.

What is the FIRST step in an incident response process according to Intelligence Fundamentals Professional Certification best practices?

Answer: Detection and identification of the security incident

The incident response process begins with detection and identification, which involves recognizing that an incident has occurred and determining its scope and nature.

In the context of Intelligence Fundamentals Professional Certification, what does the principle of least privilege mean?

Answer: Users should only have the minimum access rights necessary to perform their job functions

The principle of least privilege states that users should only be granted the minimum level of access necessary to perform their job functions, reducing the attack surface.

What type of assessment does a IFPC professional conduct to identify system weaknesses?

Answer: Vulnerability assessment and penetration testing

Vulnerability assessments and penetration testing are systematic approaches to identifying and evaluating security weaknesses in systems, networks, and applications.

Which encryption standard is generally recommended for protecting sensitive data in Intelligence Fundamentals Professional Certification?

Answer: AES-256 (Advanced Encryption Standard with 256-bit key)

AES-256 is the current industry standard for encrypting sensitive data, providing strong protection that is approved by government agencies for classified information.