1
00:00:06,510 --> 00:00:09,509
- Welcome to lesson two, deep dive quiz.

2
00:00:09,509 --> 00:00:12,630
Now, lesson two was all about summarizing

3
00:00:12,630 --> 00:00:14,940
fundamental security concepts.

4
00:00:14,940 --> 00:00:16,740
Some that are old, tried and true,

5
00:00:16,740 --> 00:00:19,140
some that are really new or emerging.

6
00:00:19,140 --> 00:00:20,940
So in two, one, we talked about

7
00:00:20,940 --> 00:00:23,700
security and privacy
principles, confidentiality,

8
00:00:23,700 --> 00:00:26,580
integrity and availability,
as well as privacy.

9
00:00:26,580 --> 00:00:28,830
2.2, we talked about zero trust,

10
00:00:28,830 --> 00:00:30,990
really important emerging area.

11
00:00:30,990 --> 00:00:33,840
In 2.3, we took a look
at physical security

12
00:00:33,840 --> 00:00:35,853
and the importance of it.

13
00:00:35,853 --> 00:00:37,560
2.4, we looked at a whole array

14
00:00:37,560 --> 00:00:40,230
of environmental conditions
and their impact.

15
00:00:40,230 --> 00:00:41,670
And then in 2.5,

16
00:00:41,670 --> 00:00:45,843
we focused in on deception
and disruption technologies.

17
00:00:46,830 --> 00:00:48,300
So now we're gonna do a quiz,

18
00:00:48,300 --> 00:00:50,871
and this is the way we're gonna work it.

19
00:00:50,871 --> 00:00:52,500
Just like the last one,
we'll get to a question,

20
00:00:52,500 --> 00:00:56,050
if you know the answer right
away, go ahead and choose it.

21
00:00:56,050 --> 00:00:57,960
But absolutely feel comfortable putting me

22
00:00:57,960 --> 00:01:00,570
on pause thinking about the answer, right?

23
00:01:00,570 --> 00:01:01,440
Make your choice,

24
00:01:01,440 --> 00:01:03,720
in some cases it's not just
gonna be multiple choice, right?

25
00:01:03,720 --> 00:01:05,880
It might be fill in the
blank like we saw last time,

26
00:01:05,880 --> 00:01:07,530
or might be matching.

27
00:01:07,530 --> 00:01:10,440
So don't hesitate just to stop the video,

28
00:01:10,440 --> 00:01:12,630
you know, take a piece of
paper, write down your answers.

29
00:01:12,630 --> 00:01:17,250
I want this to be as interactive
as we possibly can make it.

30
00:01:17,250 --> 00:01:18,850
All right, let's start our quiz.

31
00:01:21,120 --> 00:01:22,950
We have 10 questions this time

32
00:01:22,950 --> 00:01:25,200
'cause this was a much longer lesson.

33
00:01:25,200 --> 00:01:26,250
Question one,

34
00:01:26,250 --> 00:01:28,740
you're helping to prepare a
cybersecurity budget briefing

35
00:01:28,740 --> 00:01:30,570
for the board of directors,

36
00:01:30,570 --> 00:01:33,300
which statement would most likely explain

37
00:01:33,300 --> 00:01:36,060
why management is
recommending prioritizing

38
00:01:36,060 --> 00:01:38,310
the principle of availability,

39
00:01:38,310 --> 00:01:40,470
to contribute to profitability,

40
00:01:40,470 --> 00:01:43,469
to align with organizational
strategic objectives,

41
00:01:43,469 --> 00:01:46,470
in response to customer demands,

42
00:01:46,470 --> 00:01:49,140
or to meet regulatory requirements?

43
00:01:49,140 --> 00:01:51,750
Wow, those all sound like
good answers, don't they?

44
00:01:51,750 --> 00:01:55,560
So when you get a question
that the answers all seem like

45
00:01:55,560 --> 00:01:58,200
they'd be great answers,
I think they're all legit.

46
00:01:58,200 --> 00:01:59,790
I want you to think about that question

47
00:01:59,790 --> 00:02:01,680
as a hierarchical question.

48
00:02:01,680 --> 00:02:05,370
Meaning that there's
one answer that probably

49
00:02:05,370 --> 00:02:08,040
encompasses the other answers, right?

50
00:02:08,040 --> 00:02:10,410
So if you see multiple answers
that you think are right

51
00:02:10,410 --> 00:02:13,383
look at 'em and say,
could all of these, right?

52
00:02:14,290 --> 00:02:16,560
Could all of these filter
up to one of these answers?

53
00:02:16,560 --> 00:02:18,960
So which state would most likely explain

54
00:02:18,960 --> 00:02:21,840
why management is recommended
prioritizing the principle

55
00:02:21,840 --> 00:02:24,420
of availability to
contribute to profitability,

56
00:02:24,420 --> 00:02:26,910
to align with organizational
strategic objectives

57
00:02:26,910 --> 00:02:28,920
in response to customer demands

58
00:02:28,920 --> 00:02:30,600
to meet regulatory requirements.

59
00:02:30,600 --> 00:02:31,900
What are you gonna choose?

60
00:02:32,910 --> 00:02:34,680
I'm gonna choose our second one.

61
00:02:34,680 --> 00:02:37,890
To align with organizational
strategic objectives.

62
00:02:37,890 --> 00:02:40,650
Profitability is probably
a strategic objective.

63
00:02:40,650 --> 00:02:42,420
Responding to customer demands

64
00:02:42,420 --> 00:02:44,310
is probably a strategic objective,

65
00:02:44,310 --> 00:02:46,320
and to meet regulatory
requirements is most

66
00:02:46,320 --> 00:02:48,780
definitely going to be
a strategic objective.

67
00:02:48,780 --> 00:02:51,330
So all of those answers roll up to

68
00:02:51,330 --> 00:02:55,020
align with organizational
strategic objectives.

69
00:02:55,020 --> 00:02:57,693
Let's see how we did, and it is correct.

70
00:03:00,330 --> 00:03:04,080
All right, this one, we
have to choose our location.

71
00:03:04,080 --> 00:03:06,270
This is known as a hotspot question.

72
00:03:06,270 --> 00:03:07,800
We're given a couple of pictures here,

73
00:03:07,800 --> 00:03:09,660
and we're said choose the location,

74
00:03:09,660 --> 00:03:11,820
which is designated by the red lines

75
00:03:11,820 --> 00:03:14,670
that's best suited for a data center.

76
00:03:14,670 --> 00:03:16,170
So we've got three choices here

77
00:03:16,170 --> 00:03:18,750
'cause we've got three red squares.

78
00:03:18,750 --> 00:03:21,390
Looks like our first one over to the left

79
00:03:21,390 --> 00:03:23,070
is right on the first floor,

80
00:03:23,070 --> 00:03:25,890
and looks like there's
some windows that it has,

81
00:03:25,890 --> 00:03:27,610
the middle picture looks

82
00:03:28,791 --> 00:03:30,210
like it's in the middle
of the building, right?

83
00:03:30,210 --> 00:03:31,133
It's not on the first floor,

84
00:03:32,029 --> 00:03:34,320
it's not on the top and I
don't see any windows there.

85
00:03:34,320 --> 00:03:36,117
And then I get to the third picture,

86
00:03:36,117 --> 00:03:38,220
the one all the way over to the right,

87
00:03:38,220 --> 00:03:39,810
right up towards the top.

88
00:03:39,810 --> 00:03:41,910
So the top floor can't really tell

89
00:03:41,910 --> 00:03:45,120
if there's windows there
or not, but it's up on top.

90
00:03:45,120 --> 00:03:46,947
I want you to tell me

91
00:03:46,947 --> 00:03:51,390
which of these is best
suited for a data center?

92
00:03:51,390 --> 00:03:52,480
I take a look at them

93
00:03:53,490 --> 00:03:55,710
and if you get a hotspot
question like this

94
00:03:55,710 --> 00:03:57,660
what you'll do is you'll
will bring your mouse

95
00:03:57,660 --> 00:04:00,540
and click on the particular hotspot,

96
00:04:00,540 --> 00:04:02,090
the area that you wanna choose.

97
00:04:02,970 --> 00:04:06,420
So I'm gonna choose the one
right here in the middle, right?

98
00:04:06,420 --> 00:04:08,010
I like being in the middle,

99
00:04:08,010 --> 00:04:10,311
I'm not up in the, you know,

100
00:04:10,311 --> 00:04:12,060
on the top floor where I
have access from the roof,

101
00:04:12,060 --> 00:04:14,880
I'm not in the basement,
I'm not on the first floor,

102
00:04:14,880 --> 00:04:16,440
I'm centered in the building

103
00:04:16,440 --> 00:04:18,810
and I don't have any doesn't appear

104
00:04:18,810 --> 00:04:20,790
to have any windows for access.

105
00:04:20,790 --> 00:04:23,340
Where our choice over here on the left

106
00:04:23,340 --> 00:04:26,370
first floor access windows

107
00:04:26,370 --> 00:04:28,770
our one on the right, looks
like it's up on the top floor.

108
00:04:28,770 --> 00:04:32,400
Again, issue for access,
or maybe storm damage,

109
00:04:32,400 --> 00:04:35,751
or you know, rain and leaks.

110
00:04:35,751 --> 00:04:36,600
So I'm gonna choose that middle one.

111
00:04:36,600 --> 00:04:37,433
What about you?

112
00:04:39,490 --> 00:04:40,892
Do you like that one?

113
00:04:40,892 --> 00:04:42,029
All right, let's see how it is.

114
00:04:42,029 --> 00:04:43,511
And that is correct.

115
00:04:43,511 --> 00:04:45,420
Good work, all right, question three.

116
00:04:45,420 --> 00:04:48,029
We need to match the power
condition and the description.

117
00:04:48,029 --> 00:04:53,029
We have a spike, a brownout,
a sag, a surge, or a blackout,

118
00:04:54,871 --> 00:04:57,030
on the right hand side,
we have the subscriptions

119
00:04:57,030 --> 00:04:58,680
prolonged period without power,

120
00:04:58,680 --> 00:05:00,270
prolonged period of high voltage,

121
00:05:00,270 --> 00:05:02,250
prolonged period of low voltage,

122
00:05:02,250 --> 00:05:05,550
a moment of low voltage or
a moment of high voltage.

123
00:05:05,550 --> 00:05:06,660
This is a good one to put me

124
00:05:06,660 --> 00:05:08,703
on pause for while you match these up.

125
00:05:11,465 --> 00:05:14,589
All right, well let's
start with this first one,

126
00:05:14,589 --> 00:05:15,422
prolonged period without power,

127
00:05:15,422 --> 00:05:16,980
well, we all know what that one is, right?

128
00:05:16,980 --> 00:05:19,800
That's a blackout so
let's bring that one down.

129
00:05:19,800 --> 00:05:21,120
Now, the good thing about starting

130
00:05:21,120 --> 00:05:22,860
with the things you really know best

131
00:05:22,860 --> 00:05:24,660
is now you've got sort of the process

132
00:05:24,660 --> 00:05:26,313
of elimination working for you.

133
00:05:27,240 --> 00:05:28,860
A moment of high voltage,

134
00:05:28,860 --> 00:05:31,890
well that's when the power
whoosh spikes right up.

135
00:05:31,890 --> 00:05:33,303
So that's gonna be a spike.

136
00:05:34,230 --> 00:05:37,503
Our next one, prolonged
period of high voltage,

137
00:05:38,430 --> 00:05:40,020
what do you like?

138
00:05:40,020 --> 00:05:41,583
I like surge.

139
00:05:44,524 --> 00:05:46,953
A moment of low voltage, that's a sag,

140
00:05:47,940 --> 00:05:50,100
and a prolonged period of low voltage

141
00:05:50,100 --> 00:05:51,870
that's gonna be a brownout.

142
00:05:51,870 --> 00:05:53,640
So a spike, a moment of high voltage,

143
00:05:53,640 --> 00:05:56,040
a brownout a prolonged
period of low voltage,

144
00:05:56,040 --> 00:05:58,200
a sag, like a drop off,

145
00:05:58,200 --> 00:05:59,670
a moment of low voltage,

146
00:05:59,670 --> 00:06:01,830
a surge a prolonged
period of high voltage,

147
00:06:01,830 --> 00:06:05,340
and a blackout a prolonged
period without power.

148
00:06:05,340 --> 00:06:06,190
Do you like them?

149
00:06:07,404 --> 00:06:08,406
Do you agree?

150
00:06:08,406 --> 00:06:11,313
Okay, we'll check it out,
and those are correct.

151
00:06:13,260 --> 00:06:15,180
Question four,

152
00:06:15,180 --> 00:06:17,760
you are recommending this
fire suppression agent

153
00:06:17,760 --> 00:06:20,910
because it doesn't damage
electronic equipment.

154
00:06:20,910 --> 00:06:25,910
FM-200 pressurized
water, purple K or foam.

155
00:06:27,570 --> 00:06:30,486
So which one of these
are you going to choose?

156
00:06:30,486 --> 00:06:31,564
Which fire suppression agent

157
00:06:31,564 --> 00:06:33,480
because it doesn't damage
electronic equipment.

158
00:06:33,480 --> 00:06:36,450
So this would be, you know,
applicable for a data center

159
00:06:36,450 --> 00:06:40,293
FM-200, pressurized
water, purple K, or foam.

160
00:06:41,286 --> 00:06:46,143
Go ahead and make that choice
I'm gonna choose FM-200.

161
00:06:47,010 --> 00:06:49,310
I could have chosen Novak
if that was a choice

162
00:06:50,225 --> 00:06:52,806
or innu gases, but FM-200
is the best choice.

163
00:06:52,806 --> 00:06:54,870
So the ones that I'm given, do you agree?

164
00:06:54,870 --> 00:06:57,420
All right, let's check it
out, and that is correct.

165
00:06:59,010 --> 00:07:03,160
Question five, you are
designing a honey net

166
00:07:04,284 --> 00:07:05,731
with the goal of learning more

167
00:07:05,731 --> 00:07:08,070
about potential attackers
and their techniques.

168
00:07:08,070 --> 00:07:12,480
Which type of trap is used
to identify an attacker?

169
00:07:12,480 --> 00:07:16,890
Now the key word here is
identifying attacker or identify.

170
00:07:16,890 --> 00:07:19,228
So we're not just saying we wanna know

171
00:07:19,228 --> 00:07:20,790
about how we might be attacked,

172
00:07:20,790 --> 00:07:23,460
we wanna know who might be attacking us.

173
00:07:23,460 --> 00:07:26,970
Is this a honey token, a honey pot,

174
00:07:26,970 --> 00:07:30,123
a honey file, or a DNS sinkhole?

175
00:07:31,004 --> 00:07:34,950
And so we've got a honey net, right?

176
00:07:34,950 --> 00:07:37,170
We wanna learn more
about potential attackers

177
00:07:37,170 --> 00:07:38,340
and their techniques,

178
00:07:38,340 --> 00:07:39,870
but we wanna have a particular type

179
00:07:39,870 --> 00:07:44,610
of trap that will help us to
identify who the attacker is.

180
00:07:44,610 --> 00:07:48,183
Honey token, honey pot honey
file or a DNS sinkhole.

181
00:07:50,580 --> 00:07:52,833
I'm gonna choose a honey
token, do you agree?

182
00:07:54,705 --> 00:07:57,823
All right, and that's correct, right?

183
00:07:57,823 --> 00:08:00,300
Question six, we're gonna
drag and drop some words here.

184
00:08:00,300 --> 00:08:02,190
The cybersecurity and
building security teams

185
00:08:02,190 --> 00:08:04,508
are discussing emergency control options.

186
00:08:04,508 --> 00:08:07,440
Blank means that in an emergency

187
00:08:07,440 --> 00:08:09,153
controls will default to open.

188
00:08:10,170 --> 00:08:12,660
Blank means that an emergency
controls will default

189
00:08:12,660 --> 00:08:16,108
to locked, and blank means that there

190
00:08:16,108 --> 00:08:19,260
are resilient systems in place,
and we have four choices.

191
00:08:19,260 --> 00:08:24,260
Fail soft, fail safe,
fail, secure, or fail over.

192
00:08:25,020 --> 00:08:27,480
Now sometimes in your exam

193
00:08:27,480 --> 00:08:30,545
and whether you're taking a prep exam

194
00:08:30,545 --> 00:08:32,310
or a regular, the actual exam,

195
00:08:32,310 --> 00:08:35,010
you might see terms that
you've never seen before.

196
00:08:35,010 --> 00:08:37,585
Now that might be for one of two reasons,

197
00:08:37,585 --> 00:08:39,744
it might be because it
hasn't yet been included

198
00:08:39,744 --> 00:08:42,141
in your studying or you know what?

199
00:08:42,141 --> 00:08:43,260
It just might be a made up term,

200
00:08:43,260 --> 00:08:45,240
and sometimes you're gonna see that.

201
00:08:45,240 --> 00:08:47,430
So don't panic, if you get to a question

202
00:08:47,430 --> 00:08:50,428
and you see some of the
answer options, you're like,

203
00:08:50,428 --> 00:08:51,261
hey I've never even seen that,

204
00:08:51,261 --> 00:08:52,500
I don't know what that means.

205
00:08:52,500 --> 00:08:53,640
Just go with it.

206
00:08:53,640 --> 00:08:56,090
You know, it could very
well be a made up answer.

207
00:08:57,090 --> 00:08:58,770
All right, you ready to do this?

208
00:08:58,770 --> 00:09:02,403
Blank means that an emergency
controls will default to open.

209
00:09:04,500 --> 00:09:06,090
I'm going with fail safe.

210
00:09:06,090 --> 00:09:09,304
And the way I remember fail
safe to me is everything's open,

211
00:09:09,304 --> 00:09:11,673
everybody's safe, they
can get outta there.

212
00:09:13,530 --> 00:09:16,290
Fail-secure, I'm gonna
say means in an emergency

213
00:09:16,290 --> 00:09:18,360
controls will default to lock.

214
00:09:18,360 --> 00:09:20,340
I think about locking as being secure,

215
00:09:20,340 --> 00:09:21,930
I'm secure in this room.

216
00:09:21,930 --> 00:09:24,450
If I have an intruder and
the door's been locked,

217
00:09:24,450 --> 00:09:26,430
the intruder can't get in.

218
00:09:26,430 --> 00:09:27,790
And then blank means

219
00:09:28,806 --> 00:09:29,639
that there are resilient systems in place,

220
00:09:29,639 --> 00:09:30,570
and we haven't discussed this yet,

221
00:09:30,570 --> 00:09:33,030
but I bet you all knew that failover means

222
00:09:33,030 --> 00:09:34,865
there are resilient systems in place.

223
00:09:34,865 --> 00:09:37,290
So fail safe means an emergency

224
00:09:37,290 --> 00:09:39,150
controls will default to open,

225
00:09:39,150 --> 00:09:41,520
fail secure means that an
emergency controls will default

226
00:09:41,520 --> 00:09:42,353
to locked,

227
00:09:43,468 --> 00:09:44,524
and failover means that there

228
00:09:44,524 --> 00:09:45,990
are resilient systems in place.

229
00:09:45,990 --> 00:09:47,126
You like it, you agree?

230
00:09:47,126 --> 00:09:51,600
All right, let's check,
and those are correct.

231
00:09:51,600 --> 00:09:53,010
We're doing great, all right.

232
00:09:53,010 --> 00:09:56,100
Number seven, we're gonna click

233
00:09:56,100 --> 00:09:57,930
on the section of the image

234
00:09:57,930 --> 00:10:00,810
above or below the line that represent

235
00:10:00,810 --> 00:10:03,810
the zero trust control plane.

236
00:10:03,810 --> 00:10:05,220
Remember, above and below the line

237
00:10:05,220 --> 00:10:06,570
we have two different planes,

238
00:10:06,570 --> 00:10:09,105
we have a control plane and a data plane.

239
00:10:09,105 --> 00:10:12,930
So we're either gonna click
above that dotted line

240
00:10:12,930 --> 00:10:14,910
or below the dotted line.

241
00:10:14,910 --> 00:10:18,210
Tell me which part and
section of that image

242
00:10:18,210 --> 00:10:20,943
represents the zero trust control plane.

243
00:10:24,960 --> 00:10:27,730
I am going to choose a
here where it says policy

244
00:10:28,806 --> 00:10:29,970
administrator and policy engine

245
00:10:30,828 --> 00:10:32,610
which is the policy decision point, right?

246
00:10:32,610 --> 00:10:34,140
That's the control plane,

247
00:10:34,140 --> 00:10:37,380
and below the line is the data plane.

248
00:10:37,380 --> 00:10:39,900
Remember, this picture came
right from a NIST publication,

249
00:10:39,900 --> 00:10:41,300
so you can read all about it

250
00:10:42,145 --> 00:10:43,140
and get lots of great information.

251
00:10:43,140 --> 00:10:44,010
You agree?

252
00:10:44,010 --> 00:10:46,650
All right, let's submit,
and that is correct,

253
00:10:46,650 --> 00:10:47,970
good work.

254
00:10:47,970 --> 00:10:50,550
All right, question number
eight, we have another matching.

255
00:10:50,550 --> 00:10:52,560
This time we're gonna
match a physical security

256
00:10:52,560 --> 00:10:57,033
IDS or figure physical security
sensor type and description.

257
00:10:58,020 --> 00:11:01,430
On the left hand side we have contacts,

258
00:11:01,430 --> 00:11:05,820
passive infrared, photometric,
ultrasonic and motion.

259
00:11:05,820 --> 00:11:08,010
On the right hand side we
have a proximity center

260
00:11:08,010 --> 00:11:10,620
that measures distance or detects breaks

261
00:11:10,620 --> 00:11:12,390
in electrical circuit or changes,

262
00:11:12,390 --> 00:11:15,840
detects changes in movement
or changes in light

263
00:11:15,840 --> 00:11:17,973
or changes in heat signature.

264
00:11:18,900 --> 00:11:20,580
So let's start with contact.

265
00:11:20,580 --> 00:11:23,329
We look through that, what
would you choose for contact?

266
00:11:23,329 --> 00:11:27,550
Well, now you could put me on pause

267
00:11:28,726 --> 00:11:30,710
and get these all done, right?

268
00:11:30,710 --> 00:11:31,543
Or you can work through them with me.

269
00:11:31,543 --> 00:11:35,583
Contact, how about a break
in an electrical circuit?

270
00:11:37,020 --> 00:11:39,420
What about passive infrared?

271
00:11:39,420 --> 00:11:41,430
Passive infrared?

272
00:11:41,430 --> 00:11:45,390
Hmm, infrared is probably
gonna be a heat signature,

273
00:11:45,390 --> 00:11:50,390
so detects changes in a
heat signature photometric,

274
00:11:50,760 --> 00:11:52,680
no photo would be our light,

275
00:11:52,680 --> 00:11:54,723
so that's gonna detect changes in light.

276
00:11:57,330 --> 00:12:00,570
Oh, maybe I can't remember
exactly what ultrasonic is,

277
00:12:00,570 --> 00:12:01,620
but I only have two left.

278
00:12:01,620 --> 00:12:04,500
So I, again, using that
process of elimination,

279
00:12:04,500 --> 00:12:06,870
if I went to motion, I say,

280
00:12:06,870 --> 00:12:08,280
well, motion I know detects
changes in movement,

281
00:12:08,280 --> 00:12:11,760
that means ultrasonic
must be a proximity sensor

282
00:12:11,760 --> 00:12:13,290
that measures distance.

283
00:12:13,290 --> 00:12:16,650
So contact detects a brachi
in a electrical circuit,

284
00:12:16,650 --> 00:12:19,228
passive infrared detects
changes in heat signatures,

285
00:12:19,228 --> 00:12:21,960
photometric detects changes in light,

286
00:12:21,960 --> 00:12:24,540
ultrasonic proximity sensor that measures

287
00:12:24,540 --> 00:12:28,440
distance and motion detects
changes in movement,

288
00:12:28,440 --> 00:12:29,889
is that what you had?

289
00:12:29,889 --> 00:12:30,908
Do you agree?

290
00:12:30,908 --> 00:12:32,460
Let's check it out.

291
00:12:32,460 --> 00:12:35,700
And that is correct, all
right, two more to go.

292
00:12:35,700 --> 00:12:38,490
Number nine, devices in the data center

293
00:12:38,490 --> 00:12:41,130
are failing more often
than should be expected

294
00:12:41,130 --> 00:12:43,590
based on the MTBF specifications.

295
00:12:43,590 --> 00:12:46,080
MTBF is meantime between failures.

296
00:12:46,080 --> 00:12:49,405
Which explanation below
is the most plausible?

297
00:12:49,405 --> 00:12:51,843
The fiber optic cable is not shielded.

298
00:12:51,843 --> 00:12:55,620
Temperature is set for
72 degrees Fahrenheit,

299
00:12:55,620 --> 00:12:58,950
the data center racks are
all facing the same way

300
00:12:58,950 --> 00:13:03,600
or relative humidity
is between 45 and 60%.

301
00:13:03,600 --> 00:13:05,820
Okay, so we've got these
devices in our data center,

302
00:13:05,820 --> 00:13:08,460
they're failing just a lot more frequently

303
00:13:08,460 --> 00:13:10,710
than we expect they should be.

304
00:13:10,710 --> 00:13:12,750
What's the most plausible explanation?

305
00:13:12,750 --> 00:13:14,050
What are you gonna choose?

306
00:13:15,120 --> 00:13:16,110
Cable isn't shielded,

307
00:13:16,110 --> 00:13:18,420
the temperature is 72 degrees Fahrenheit.

308
00:13:18,420 --> 00:13:21,030
The data center racks are
all facing the same way,

309
00:13:21,030 --> 00:13:24,623
or the relative humidity
use between 45 and 60%.

310
00:13:26,486 --> 00:13:29,430
Well, I'm gonna choose the
third one that the data

311
00:13:29,430 --> 00:13:30,750
center racks are all facing the same way.

312
00:13:30,750 --> 00:13:33,120
Fiber optic cable does
not need to be shielded,

313
00:13:33,120 --> 00:13:35,750
although as I mentioned,
you may wanna shield it

314
00:13:35,750 --> 00:13:36,748
if it's out in the ground,

315
00:13:36,748 --> 00:13:37,581
so critters don't eat it.

316
00:13:37,581 --> 00:13:39,270
Temperature set for 72 degrees Fahrenheit.

317
00:13:39,270 --> 00:13:41,100
That's a lovely temperature
for our equipment

318
00:13:41,100 --> 00:13:42,780
and for us as people,

319
00:13:42,780 --> 00:13:45,420
relative humidity between 45 and 60%,

320
00:13:45,420 --> 00:13:46,710
that's awesome, right?

321
00:13:46,710 --> 00:13:49,080
Not too damp, not too dry, that's perfect.

322
00:13:49,080 --> 00:13:53,741
All of those are good data
center racks facing the same way.

323
00:13:53,741 --> 00:13:55,809
Remember we talked about the problem there

324
00:13:55,809 --> 00:13:57,270
of you take the data center devices take

325
00:13:57,270 --> 00:13:59,070
in air from the front and they exhaust

326
00:13:59,070 --> 00:14:01,110
out the back and the the
air that they exhaust

327
00:14:01,110 --> 00:14:03,300
is hot or warmer than what they took in.

328
00:14:03,300 --> 00:14:05,970
And we keep going all the
way down the line till

329
00:14:05,970 --> 00:14:07,890
you know, three, four, or five rows down.

330
00:14:07,890 --> 00:14:11,310
You know, the devices are
taking in really, really hot air

331
00:14:11,310 --> 00:14:13,833
and that's really enough
to have them fail.

332
00:14:15,288 --> 00:14:16,890
Let's double check, see if it's right,

333
00:14:16,890 --> 00:14:17,790
that is correct.

334
00:14:17,790 --> 00:14:19,304
Good work.

335
00:14:19,304 --> 00:14:21,210
And we've, so far, we've gotten
90 out of a hundred points,

336
00:14:21,210 --> 00:14:23,460
can we get a hundred out of a hundred?

337
00:14:23,460 --> 00:14:25,489
One more matching and this is a tough one.

338
00:14:25,489 --> 00:14:28,230
We're gonna match the
zero trust components

339
00:14:28,230 --> 00:14:30,390
with their description.

340
00:14:30,390 --> 00:14:32,400
We've got a policy engine,

341
00:14:32,400 --> 00:14:34,129
the policy enforcement point,

342
00:14:34,129 --> 00:14:36,693
and the policy administrator.

343
00:14:37,620 --> 00:14:40,503
One makes the decision to grant access,

344
00:14:41,692 --> 00:14:43,830
one creates a session
specific authentication

345
00:14:43,830 --> 00:14:45,690
or the authentication token,

346
00:14:45,690 --> 00:14:48,690
and one monitors and
terminates the connections.

347
00:14:48,690 --> 00:14:50,130
Two are in the control plane

348
00:14:50,130 --> 00:14:51,990
and one is down in the data plane.

349
00:14:51,990 --> 00:14:53,910
And see if you can visualize that picture

350
00:14:53,910 --> 00:14:56,160
that we've been using of the control

351
00:14:56,160 --> 00:14:59,750
and data planes in the zero
trust architecture environment.

352
00:14:59,750 --> 00:15:03,330
So the decision to grant access,

353
00:15:03,330 --> 00:15:05,250
where are we gonna choose that one?

354
00:15:05,250 --> 00:15:06,200
I think we put that

355
00:15:07,612 --> 00:15:09,210
with the policy engine,

356
00:15:09,210 --> 00:15:11,610
actually does the work of generating that

357
00:15:11,610 --> 00:15:14,588
session specific authentication
or the authentication token?

358
00:15:14,588 --> 00:15:18,633
Yeah, our administrator's
gonna do the work,

359
00:15:19,510 --> 00:15:21,810
and then that policy
enforcement point, right?

360
00:15:22,652 --> 00:15:23,670
That's the point that it monitors

361
00:15:23,670 --> 00:15:25,650
and ultimately terminates
the connection, right?

362
00:15:25,650 --> 00:15:27,810
And so that's gonna be down
in the data plane, right?

363
00:15:27,810 --> 00:15:30,270
Because it knows what's going on,

364
00:15:30,270 --> 00:15:32,449
I am gonna put that right there

365
00:15:32,449 --> 00:15:34,470
in the policy enforcement point, the PEP.

366
00:15:34,470 --> 00:15:37,930
So policy engine PE makes a decision to

367
00:15:37,930 --> 00:15:39,120
grant access the policy enforcement point

368
00:15:39,120 --> 00:15:41,040
monitors and terminates those connections,

369
00:15:41,040 --> 00:15:44,268
and the policy administrator
generates a session

370
00:15:44,268 --> 00:15:45,360
specific authentication.

371
00:15:45,360 --> 00:15:46,910
And if this is confusing memory

372
00:15:47,990 --> 00:15:49,649
you've got that whole
publication to look at.

373
00:15:49,649 --> 00:15:50,892
Or if you don't wanna go that far

374
00:15:50,892 --> 00:15:52,650
just being able to look
at that illustration.

375
00:15:52,650 --> 00:15:54,652
All right, let's try it,

376
00:15:54,652 --> 00:15:57,300
see if we get a hundred
out of a hundred points.

377
00:15:57,300 --> 00:15:58,850
Ah, awesome, and we're correct.

378
00:16:00,171 --> 00:16:02,070
Great job, you guys did
really, really excellent.

379
00:16:02,070 --> 00:16:04,200
Up next is gonna be lesson three,

380
00:16:04,200 --> 00:16:05,700
we're gonna explain the importance

381
00:16:05,700 --> 00:16:09,150
of change management processes
and the impact to security.

382
00:16:09,150 --> 00:16:10,250
So I'll see you there.