Chapter 1 - Today's Cybersecurity Analyst

Question 1

Confidentiality

Answer 1

Ensures that unathorized individuals are not able to gain access to sensitive information.

Question 2

Integrity

Answer 2

Ensures that there are no unauthorized modifications to information or systems, either intentionally or unintentionally.

Question 3

Availability

Answer 3

Ensures that information and systems are ready to meet the needs of legitimate users at the time those users request them.

Question 4

Vulnerability

Answer 4

A weakness in a device, system, application, or process that might allow an attack to take place. Internal factors that may be controlled by cybersecurity professionals.

Question 5

Threat

Answer 5

An outside force that may exploit a vulnerability.

Question 6

Adversarial Threats

Answer 6

Individuals, groups, and organizations that are attempting to deliberately undermine the security of an organization.

Question 7

Accidental Threats

Answer 7

Occur when individuals doing their routine work mistakenly perform an action that undermines security.

Question 8

Structural Threats

Answer 8

Occur when equipment, software, or environmental controls fail due to the exhaustion of resources, exceeding their operational capability or simply failing due to age.

Question 9

Environmental Threats

Answer 9

Occur when natural or human-made disasters occur that are outside the control of the organization.

Question 10

Network Access Control (NAC) Solutions

Answer 10

Help security professionals achieve two cybersecurity objectives: limiting network access to authorized individuals and ensuring that systems accessing the organization’s network meet basic security requirements.

Question 11

Network Firewalls

Answer 11

Sit at the boundaries between networks and provide perimeter security.

Question 12

Network Segmentation

Answer 12

Uses isolation to separate networks of differing security levels from each other.

Question 13

Hardening Configurations

Answer 13

Includes disabling unnecessary services on endpoints to reduce their susceptibility to attack, ensuring that secure configuration settings exist on devices, and centrally controlling device security settings.

Question 14

Patch Management

Answer 14

Ensures that operating systems and applications are not susceptible to known vulnerabilities.

Question 15

Group Policy

Answer 15

Allows the application of security settings to many devices simultaneously.

Question 16

Endpoint Security Software

Answer 16

Protects against malicious software and other threats.

Question 17

NIST Process for Pen Testing

Answer 17

1. Planning
2. Discovery
3. Attack
4. Reporting

Question 18

Penetration Testing Results

Answer 18

Valuable security planning tools that describe the actual vulnerabilities that an attacker might exploit to gain access to a network.

Question 19

Sandboxing

Answer 19

An approach used to detect malicious software based on its behavior rather than its signatures.

Question 20

Area of great promise for future cybersecurity analytics tools

Answer 20

The continued adoption of machine learning techniques designed to automatically extract knowledge from the voluminous quantity of information generated by security systems.

Question 21

Privacy

Answer 21

Focuses on the ways that an organization can use and share information that has been collected about individuals (PII).

Question 22

Generally Accepted Privacy Principles (GAPP)

Answer 22

1. Management
2. Notice
3. Choice and consent
4. Collection
5. Use, retention, and disposal
6. Access
7. Disclosure
8. Security
9. Quality
10. Monitoring and enforcement

Question 23

Risk

Answer 23

The combination of a threat with a corresponding vulnerability.

Question 24

802.1X Protocol

Answer 24

A common standard used for NAC

Question 25

State Inspection Firewall

Answer 25

Maintains information about the state of each connection passing through the firewall. Most basic firewalls sold as stand-alone productions.

Question 26

Next-Generation Firewalls (NGFWs)

Answer 26

Incorporate information into their decision making process including contextual information about users, applications, and business processes. Current state-of-the-art in network firewall protection.

Question 27

Web application firewalls (WAFs)

Answer 27

Specialized firewalls designed to protect against web application attacks, such as SQL injection and XSS

Question 28

Honeypots

Answer 28

Systems designed to appear to attackers as lucrative targets due to the services they run, vulnerabilities they contain, or sensitive information they appear to host.

Question 29

DNS Sinkhole

Answer 29

Feed false information to malicious software that works its way onto the enterprise network.