CYS406 · Annotated SlidesChapter 16 — Data Security
Chapter 16 · Annotated slides

Data Security

Business-critical data and data at rest vs. in transit vs. in use, disk, file and removable-media encryption, backup strategy and media, RAID levels, SAN and NAS, backup types (full, incremental, differential), retention, recovery, and data loss prevention.

Slide text Study notes Highlight: key words Tips, tricks & traps Seen again elsewhere How it can come up
Slide 1: Slide 1
Exam weight Low
    Slide 2: Module Objectives
    Exam weight Low
      Slide 3: Module Flow
      Exam weight Low
        Slide 4: What is Business Critical Data?
        Exam weight Low
          Slide 5: Need for Data Security
          Exam weight Low
            Slide 6: Data Security
            Exam weight Low
              Slide 7: Example: “Data at Rest” vs “Data in Use” vs “Data in Transit”
              Exam weight High
              1. Data at rest (stored), in transit (moving over a network), in use (being processed): each needs its own protection.
              🎯 How this can come up · 1 question
              MCQ

              An encrypted laptop hard drive protects data:

              Slide 8: Data Security Technologies
              Exam weight Low
                Slide 9: Module Flow
                Exam weight Low
                  Slide 10: Slide 10
                  Exam weight Low
                    Slide 11: Disk Encryption: Implementing Built-in Disk Encryption for Windows
                    Exam weight Low
                    1. Full-disk encryption (e.g. BitLocker) protects everything on a lost or stolen device.
                    Slide 12: Disk Encryption Tools
                    Exam weight Low
                      Slide 13: File Level Encryption: Implementing Built-in File System-level Encryption on Windows
                      Exam weight Low
                        Slide 14: File Encryption Tools
                        Exam weight Low
                          Slide 15: Removable Media Encryption: Implementing Removable Media Encryption in Windows
                          Exam weight Low
                            Slide 16: Removable Media Encryption Tools
                            Exam weight Low
                              Slide 17: Module Flow
                              Exam weight Low
                                Slide 18: Slide 18
                                Exam weight Low
                                  Slide 19: Data Backup Strategy/Plan
                                  Exam weight Low
                                  1. Backup strategy: what, how often, which media, where (offsite/cloud), how long, test restores. 3-2-1 rule: 3 copies, 2 media, 1 offsite.
                                  Slide 20: Selecting the Backup Media
                                  Exam weight Low
                                    Slide 21: Examples of Data Backup Media Devices
                                    Exam weight Low
                                      Slide 22: Redundant Array Of Independent Disks (RAID) Technology
                                      Exam weight Low
                                      1. RAID combines disks for performance and/or redundancy (not a backup!).
                                      Exam trapRAID protects against disk failure, not deletion or ransomware: it is not a backup.
                                      Slide 23: Advantages/Disadvantages of RAID Systems
                                      Exam weight Low
                                        Slide 24: RAID Storage Architecture
                                        Exam weight Low
                                          Slide 25: RAID Storage Architecture (Cont’d)
                                          Exam weight Low
                                            Slide 26: Slide 26
                                            Exam weight Low
                                              Slide 27: RAID Level 0: Disk Striping
                                              Exam weight Low
                                              1. RAID 0: striping, no redundancy (fast, any disk failure loses all).
                                              Slide 28: RAID Level 1: Disk Mirroring
                                              Exam weight Low
                                              1. RAID 1: mirroring (two copies; 50% capacity).
                                              Slide 29: RAID Level 3: Disk Striping with Parity
                                              Exam weight Low
                                                Slide 30: RAID Level 5: Block Interleaved Distributed Parity
                                                Exam weight High
                                                1. RAID 5: block striping with distributed parity; survives one disk failure; needs ≥ 3 disks.
                                                🎯 How this can come up · 2 questions
                                                MCQ

                                                Which RAID level offers striping with distributed parity and survives one disk failure?

                                                MCQ

                                                RAID 0 provides:

                                                Slide 31: RAID Level 10: Blocks Striped and Mirrored
                                                Exam weight Low
                                                1. RAID 10: mirrored pairs that are then striped (fast and redundant; ≥ 4 disks).
                                                Slide 32: RAID Level 50: Mirroring and Striping across Multiple RAID Levels
                                                Exam weight Low
                                                  Slide 33: Storage Area Network (SAN)
                                                  Exam weight Low
                                                  1. SAN: dedicated block-level storage network. NAS: file-level storage on the LAN.
                                                  Slide 34: Advantages of SAN
                                                  Exam weight Low
                                                    Slide 35: Network Attached Storage (NAS)
                                                    Exam weight Low
                                                      Slide 36: Selecting an Appropriate Backup Method
                                                      Exam weight Low
                                                        Slide 37: Choosing the Backup Location
                                                        Exam weight Low
                                                          Slide 38: Types of Backup
                                                          Exam weight High
                                                          1. Full: everything (slow backup, fast restore). Incremental: changes since the LAST backup (fast backup, slow restore: full + every incremental). Differential: changes since the last FULL (restore = full + latest differential).
                                                          🎯 How this can come up · 2 questions
                                                          MCQ

                                                          Restoring from full + differential backups needs:

                                                          MCQ

                                                          Which backup type is fastest to perform each day?

                                                          Slide 39: Backup Types: Advantages and Disadvantages
                                                          Exam weight Low
                                                            Slide 40: Data Backup Tools
                                                            Exam weight Low
                                                              Slide 41: Data Backup Retention
                                                              Exam weight Low
                                                                Slide 42: Data Retention Policy Best Practices
                                                                Exam weight Low
                                                                  Slide 43: Data Recovery Tools
                                                                  Exam weight Low
                                                                    Slide 44: Module Flow
                                                                    Exam weight Low
                                                                      Slide 45: What is Data Loss Prevention?
                                                                      Exam weight High
                                                                      1. DLP: tools and policies that detect and block sensitive data leaving the organization (network, endpoint, storage).
                                                                      🎯 How this can come up · 1 question
                                                                      MCQ

                                                                      Software that blocks an employee from emailing a file of credit-card numbers outside is:

                                                                      Slide 46: Types of Data Loss Prevention (DLP) Solutions
                                                                      Exam weight Low
                                                                        Slide 47: DLP Solution: Windows Information Protection (WIP)
                                                                        Exam weight Low
                                                                          Slide 48: DLP Solutions
                                                                          Exam weight Low
                                                                            Slide 49: Best Practices for a Successful DLP Implementation
                                                                            Exam weight Low
                                                                              Slide 50: Module Summary
                                                                              Exam weight Low