VCE Data Analytics U4O2 Definitions Worksheet: Evaluating security with CIA and security controls to Disaster recovery plans (Modules 44–79)
Name:
Date:
Class:
✎
Key terms
Write what each term means, in your own words.
1
Adaptive authentication
2
physical security controls
3
Data loss prevention (DLP)
4
data at rest
5
data in transit
6
symmetric vs asymmetric
7
hash function
8
hash comparison
9
Match technique to job
10
disaster recovery plan
Answer Key
VCE Data Analytics U4O2 · Modules 44–79 · Student wording will vary for definitions
1Adaptive authentication — Login checks that change with risk signals like location, device or time. A known device gets an easy login; an unusual location triggers extra proof.
2physical security controls — Barriers such as locks, swipe cards, CCTV and secure server rooms that stop unauthorised people reaching hardware and stored data.
3Data loss prevention (DLP) — Controls that detect and block sensitive data leaving an organisation, such as by email, USB or upload, and alert staff to risky transfers like large exports.
4data at rest — Data stored on a device, server or backup, not moving. Protect it with encryption (disk or database) and access control, so a stolen laptop or backup is unreadable.
5data in transit — Data moving across a network, such as email or web traffic. It is protected by encrypting it (e.g. HTTPS or a VPN) so intercepted data cannot be read.
6symmetric vs asymmetric — Symmetric: one shared secret key, fast but hard to share safely. Asymmetric: public and private key pair, no secret to share but slower. Often combined.
7hash function — A one-way function that turns any input into a fixed-length value. The same input always gives the same hash, a tiny change gives a very different one, and it cannot be reversed.
8hash comparison — Hash the file before and after transfer. If both hashes (checksums) match, the data is unchanged. A different hash shows the file was altered or tampered with, so its integrity is lost.
9Match technique to job — Choose symmetric encryption for stored data, asymmetric keys to swap keys and sign, and hashing to check integrity and store passwords. Justify the choice.
10disaster recovery plan — A plan made in advance that sets out who does what to protect people and restore data and systems after a disruption, so downtime is limited.