CYS406 · Chapter 16 · Annotated SlidesData Security
Original
Overview

Data Security

Business-critical data and data at rest vs. in transit vs. in use, disk, file and removable-media encryption, backup strategy and media, RAID levels, SAN and NAS, backup types (full, incremental, differential), retention, recovery, and data loss prevention.

How to read this page

Every original slide is shown unchanged. Yellow marks on a slide point to a numbered note: hover or tap a mark to jump to its note, and hover a note to see its marks. Questions tagged Past exam appeared on a real paper; Prediction questions are likely angles, not confirmed. Pick an answer to each question: a wrong pick tells you why it is wrong, so you can try again.

All 50 slides
  1. 1 Slide 1
  2. 2 Module Objectives
  3. 3 Module Flow
  4. 4 What is Business Critical Data?
  5. 5 Need for Data Security
  6. 6 Data Security
  7. 7 Example: “Data at Rest” vs “Data in Use” vs “Data in Transit”
  8. 8 Data Security Technologies
  9. 9 Module Flow
  10. 10 Techniques
  11. 11 Disk Encryption: Implementing Built-in Disk Encryption for Windows
  12. 12 Disk Encryption Tools
  13. 13 File Level Encryption: Implementing Built-in File System-level Encryption on Windows
  14. 14 File Encryption Tools
  15. 15 Removable Media Encryption: Implementing Removable Media Encryption in Windows
  16. 16 Removable Media Encryption Tools
  17. 17 Module Flow
  18. 18 Introduction to Data Backup
  19. 19 Data Backup Strategy/Plan
  20. 20 Selecting the Backup Media
  21. 21 Examples of Data Backup Media Devices
  22. 22 Redundant Array Of Independent Disks (RAID) Technology
  23. 23 Advantages/Disadvantages of RAID Systems
  24. 24 RAID Storage Architecture
  25. 25 RAID Storage Architecture (Cont’d)
  26. 26 (Cont’d)
  27. 27 RAID Level 0: Disk Striping
  28. 28 RAID Level 1: Disk Mirroring
  29. 29 RAID Level 3: Disk Striping with Parity
  30. 30 RAID Level 5: Block Interleaved Distributed Parity
  31. 31 RAID Level 10: Blocks Striped and Mirrored
  32. 32 RAID Level 50: Mirroring and Striping across Multiple RAID Levels
  33. 33 Storage Area Network (SAN)
  34. 34 Advantages of SAN
  35. 35 Network Attached Storage (NAS)
  36. 36 Selecting an Appropriate Backup Method
  37. 37 Choosing the Backup Location
  38. 38 Types of Backup
  39. 39 Backup Types: Advantages and Disadvantages
  40. 40 Data Backup Tools
  41. 41 Data Backup Retention
  42. 42 Data Retention Policy Best Practices
  43. 43 Data Recovery Tools
  44. 44 Module Flow
  45. 45 What is Data Loss Prevention?
  46. 46 Types of Data Loss Prevention (DLP) Solutions
  47. 47 DLP Solution: Windows Information Protection (WIP)
  48. 48 DLP Solutions
  49. 49 Best Practices for a Successful DLP Implementation
  50. 50 Module Summary
Slide 1 / 50

Slide 1

Slide 1: Slide 1
Slide 2 / 50

Module Objectives

Slide 2: Module Objectives
Slide 3 / 50

Module Flow

Slide 3: Module Flow
Slide 4 / 50

What is Business Critical Data?

Slide 4: What is Business Critical Data?
Slide 5 / 50

Need for Data Security

Slide 5: Need for Data Security
Slide 6 / 50

Data Security

Slide 6: Data Security
Slide 7 / 50

Example: “Data at Rest” vs “Data in Use” vs “Data in Transit”

Slide 7: Example: “Data at Rest” vs “Data in Use” vs “Data in Transit”

Notes

  1. Data at rest (stored), in transit (moving over a network), in use (being processed): each needs its own protection.

Exam angle

PredictionQ1

An encrypted laptop hard drive protects data:

Slide 8 / 50

Data Security Technologies

Slide 8: Data Security Technologies
Slide 9 / 50

Module Flow

Slide 9: Module Flow
Slide 10 / 50

Techniques

Slide 10: Techniques
Slide 11 / 50

Disk Encryption: Implementing Built-in Disk Encryption for Windows

Slide 11: Disk Encryption: Implementing Built-in Disk Encryption for Windows

Notes

  1. Full-disk encryption (e.g. BitLocker) protects everything on a lost or stolen device.

Slide 12 / 50

Disk Encryption Tools

Slide 12: Disk Encryption Tools
Slide 13 / 50

File Level Encryption: Implementing Built-in File System-level Encryption on Windows

Slide 13: File Level Encryption: Implementing Built-in File System-level Encryption on Windows
Slide 14 / 50

File Encryption Tools

Slide 14: File Encryption Tools
Slide 15 / 50

Removable Media Encryption: Implementing Removable Media Encryption in Windows

Slide 15: Removable Media Encryption: Implementing Removable Media Encryption in Windows
Slide 16 / 50

Removable Media Encryption Tools

Slide 16: Removable Media Encryption Tools
Slide 17 / 50

Module Flow

Slide 17: Module Flow
Slide 18 / 50

Introduction to Data Backup

Slide 18: Introduction to Data Backup
Slide 19 / 50

Data Backup Strategy/Plan

Slide 19: Data Backup Strategy/Plan

Notes

  1. Backup strategy: what, how often, which media, where (offsite/cloud), how long, test restores. 3-2-1 rule: 3 copies, 2 media, 1 offsite.

Slide 20 / 50

Selecting the Backup Media

Slide 20: Selecting the Backup Media
Slide 21 / 50

Examples of Data Backup Media Devices

Slide 21: Examples of Data Backup Media Devices
Slide 22 / 50

Redundant Array Of Independent Disks (RAID) Technology

Slide 22: Redundant Array Of Independent Disks (RAID) Technology

Notes

  1. Trap RAID protects against disk failure, not deletion or ransomware: it is not a backup.

Slide 23 / 50

Advantages/Disadvantages of RAID Systems

Slide 23: Advantages/Disadvantages of RAID Systems
Slide 24 / 50

RAID Storage Architecture

Slide 24: RAID Storage Architecture
Slide 25 / 50

RAID Storage Architecture (Cont’d)

Slide 25: RAID Storage Architecture (Cont’d)
Slide 26 / 50

(Cont’d)

Slide 26: (Cont’d)
Slide 27 / 50

RAID Level 0: Disk Striping

Slide 27: RAID Level 0: Disk Striping

Notes

  1. RAID 0: striping, no redundancy (fast, any disk failure loses all).

Slide 28 / 50

RAID Level 1: Disk Mirroring

Slide 28: RAID Level 1: Disk Mirroring
Slide 29 / 50

RAID Level 3: Disk Striping with Parity

Slide 29: RAID Level 3: Disk Striping with Parity
Slide 30 / 50

RAID Level 5: Block Interleaved Distributed Parity

Slide 30: RAID Level 5: Block Interleaved Distributed Parity

Notes

  1. RAID 5: block striping with distributed parity; survives one disk failure; needs ≥ 3 disks.

Exam angle

PredictionQ1

Which RAID level offers striping with distributed parity and survives one disk failure?

PredictionQ2

RAID 0 provides:

Slide 31 / 50

RAID Level 10: Blocks Striped and Mirrored

Slide 31: RAID Level 10: Blocks Striped and Mirrored
Slide 32 / 50

RAID Level 50: Mirroring and Striping across Multiple RAID Levels

Slide 32: RAID Level 50: Mirroring and Striping across Multiple RAID Levels
Slide 33 / 50

Storage Area Network (SAN)

Slide 33: Storage Area Network (SAN)

Notes

  1. SAN: dedicated block-level storage network. NAS: file-level storage on the LAN.

Slide 34 / 50

Advantages of SAN

Slide 34: Advantages of SAN
Slide 35 / 50

Network Attached Storage (NAS)

Slide 35: Network Attached Storage (NAS)
Slide 36 / 50

Selecting an Appropriate Backup Method

Slide 36: Selecting an Appropriate Backup Method
Slide 37 / 50

Choosing the Backup Location

Slide 37: Choosing the Backup Location
Slide 38 / 50

Types of Backup

Slide 38: Types of Backup

Notes

  1. Full: everything (slow backup, fast restore). Incremental: changes since the LAST backup (fast backup, slow restore: full + every incremental). Differential: changes since the last FULL (restore = full + latest differential).

Exam angle

PredictionQ1

Restoring from full + differential backups needs:

PredictionQ2

Which backup type is fastest to perform each day?

Slide 39 / 50

Backup Types: Advantages and Disadvantages

Slide 39: Backup Types: Advantages and Disadvantages
Slide 40 / 50

Data Backup Tools

Slide 40: Data Backup Tools
Slide 41 / 50

Data Backup Retention

Slide 41: Data Backup Retention
Slide 42 / 50

Data Retention Policy Best Practices

Slide 42: Data Retention Policy Best Practices
Slide 43 / 50

Data Recovery Tools

Slide 43: Data Recovery Tools
Slide 44 / 50

Module Flow

Slide 44: Module Flow
Slide 45 / 50

What is Data Loss Prevention?

Slide 45: What is Data Loss Prevention?

Notes

  1. DLP: tools and policies that detect and block sensitive data leaving the organization (network, endpoint, storage).

Exam angle

PredictionQ1

Software that blocks an employee from emailing a file of credit-card numbers outside is:

Slide 46 / 50

Types of Data Loss Prevention (DLP) Solutions

Slide 46: Types of Data Loss Prevention (DLP) Solutions
Slide 47 / 50

DLP Solution: Windows Information Protection (WIP)

Slide 47: DLP Solution: Windows Information Protection (WIP)
Slide 48 / 50

DLP Solutions

Slide 48: DLP Solutions
Slide 49 / 50

Best Practices for a Successful DLP Implementation

Slide 49: Best Practices for a Successful DLP Implementation
Slide 50 / 50

Module Summary

Slide 50: Module Summary