/
Data Protection and Cryptography Essentials
Save to my account
Sign up
Data Protection and Cryptography Essentials
Data Protection and Cryptography Essentials
Study
1
Question
What is data in transit?
Answer
Data actively moving between locations, vulnerable to interception
2
Question
Name two transport encryption methods used for data in transit.
Answer
SSL/TLS, VPN, IPSec
3
Question
What does IPSec do?
Answer
Secures IP communications by authenticating/encrypting packets
4
Question
What is data in use?
Answer
Data actively being created, retrieved, updated, or deleted
5
Question
List three protection measures for data in use.
Answer
Application-level encryption; Access controls; Secure enclaves
6
Question
What is a secure enclave in data protection?
Answer
Isolated processing environment for sensitive data
7
Question
What is INTEL Software Guard used for?
Answer
Encrypts data in memory to prevent access
8
Question
Define data at rest.
Answer
Inactive data stored on storage devices
9
Question
What is data sovereignty?
Answer
Laws governing digital information based on location of data
10
Question
What does GDPR regulate?
Answer
Protection of EU citizens' data within EU/EEA; compliance required
11
Question
What is the challenge of data sovereignty for cloud services?
Answer
Storing/processing data across borders; compliance complexity
12
Question
What is geofencing in data security?
Answer
Using geographic boundaries to restrict data access
13
Question
How is encryption different from hashing?
Answer
Encryption is reversible with a key; hashing is irreversible
14
Question
What is hashing primarily used for?
Answer
Create fixed-size digest, often for password storage
15
Question
What is masking in data protection?
Answer
Replace data with placeholders while preserving some metadata
16
Question
What is tokenization?
Answer
Replace data with non-sensitive tokens; original data stored securely
17
Question
What is data obfuscation?
Answer
Make data unclear to hinder unauthorized understanding
18
Question
What is data segmentation?
Answer
Divide network into segments with separate controls to limit lateral movement
19
Question
What are ACLs and RBAC used for?
Answer
Control data access and actions by users/roles
20
Question
What does Data Loss Prevention (DLP) monitor?
Answer
Data in use, in transit, or at rest to detect theft
21
Question
What are the four types of DLP systems listed?
Answer
Endpoint, Network, Storage, Cloud-based DLP
22
Question
What is the primary goal of cryptography?
Answer
Protect information by transforming it via encryption
23
Question
Differentiate data states: data at rest vs in transit vs in use.
Answer
At rest: stored; in transit: moving; in use: being processed
24
Question
What are symmetric encryption and its typical drawback?
Answer
Single key for encrypt/decrypt; key distribution challenge
25
Question
What is a hybrid encryption approach?
Answer
Use asymmetric to share a key, then symmetric for bulk data
26
Question
Name three asymmetric algorithms.
Answer
Diffie-Hellman, RSA, ECC
27
Question
Name three symmetric algorithms listed.
Answer
DES, AES, Blowfish (etc.)
28
Question
What is a digital certificate?
Answer
Electronic credentials verifying identity for secure communications
29
Question
What is PKI?
Answer
Framework for managing keys and certificates
30
Question
What is a private key used for in asymmetric encryption?
Answer
Decryption (and signing in some schemes)