SY0-701 domain 1: control categories and types, CIA, AAA, zero trust, change management and cryptographic solutions.
40 cards · basic cards · AI-written, checked twice. Edit anything.
- What does Confidentiality mean in the CIA triad?
Show answer
Only authorized users can access information
- What does Integrity mean in the CIA triad?
Show answer
Data has not been altered without authorization
- What does Availability mean in the CIA triad?
Show answer
Authorized users can access data and services when needed
- What is Authentication in the AAA model?
Show answer
Verifying the identity of a user or device
- What is Authorization in the AAA model?
Show answer
Granting or denying access rights to authenticated users
- What is Accounting in the AAA model?
Show answer
Recording and monitoring user actions and resource access
- What are Preventive controls?
Show answer
Controls designed to stop an attack or unwanted event from occurring
- What are Detective controls?
Show answer
Controls that identify and alert on attacks or policy violations during or after occurrence
- What are Corrective controls?
Show answer
Controls that fix or remedy damage from an attack or policy violation
- What are Compensating controls?
Show answer
Alternative controls used when a primary control is not feasible or effective
- What are Deterrent controls?
Show answer
Controls that discourage attacks by increasing the perceived risk
- What are Recovery controls?
Show answer
Controls that restore systems and data to normal operations after an incident
- What are Technical controls?
Show answer
Technology-based controls like encryption, firewalls, and access control systems
- What are Administrative controls?
Show answer
Policies, procedures, and governance mechanisms to manage security
- What are Physical controls?
Show answer
Locks, guards, surveillance cameras, and environmental protections