What's changed: Initial version
6.2Fundamental security concepts
Covers the three security pillars CIA (confidentiality/integrity/availability), AAA (authentication/authorization/accounting) that verifies, controls, and records users, MFA that strengthens identity checks with multiple factors, the identity foundations of encryption, certificates, password complexity, and Active Directory, plus threats such as phishing, malware, and DoS—as the basis for telling "what a control is meant to protect."
Security talk feels intimidating for its many terms, but at its root is a simple question: "what to protect, from whom, and how." The measuring stick for what to protect is CIA (confidentiality, integrity, availability), and the mechanism to verify users, grant rights, and record activity is AAA (authentication, authorization, accounting). On top of these two foundations, this section ties together MFA that strengthens identity checks, encryption and certificates that protect data in transit and at rest, password complexity, Active Directory that centralizes identities, and common threats such as phishing, malware, and DoS—through the lens of "which part of CIA each control protects."
6.2.1CIA and AAA
Continue reading — free sign-up
You're reading the free preview. Sign up free to read this section in full, plus every chapter (including 4+) and all questions.