Review questions — General Security Concepts

Summary: General Security Concepts

General security is not reducible to the device in view. A server-room badge reader combines physical and technical control; its log detects, while a lock prevents. In payroll, authentication establishes the session, authorization decides whether that identity may access a specific record, and accounting attributes the action. Passing MFA therefore does not permit editing a colleague's bank details. If a policy service fails during an emergency, compare denial with a predesigned narrow, monitored path; do not grant everyone access. For a payment-firewall change, record the required flow and test both allowed and denied paths before deployment. Define a measurable error threshold and rollback authority. After restoring rules, verify a successful payment: command completion is not service recovery. Choose cryptography by objective: TLS with a hostname-validated server certificate for protected transport, a signature for integrity and origin, slow derivation with a unique salt for passwords, and a separate key for backups. A signature does not conceal content, and renewing a server certificate cannot recover a backup whose decryption key is lost. This is a training review for SY0-701 skills, not an official exam form. Compare physical safeguards at testable boundaries: visitor authorization, tailgating denial, and open-door alerting. A bounded decoy detects unusual touches but does not replace real access control. Close a gap with test evidence, owner, and deadline—not a count of purchased devices.