Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

ITSY-1300 > Chapter 2: Threat Management and Cybersecurity Resources > Flashcards

Chapter 2: Threat Management and Cybersecurity Resources Flashcards

1
Q

A type of test that attempts to exploit vulnerabilities just as a threat actor would

A

Penetration test

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Why should pen testing be carried out?

A

Deep vulnerabilities can only be revealed through a simulated attack using the mindset of an actual threat actor

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What are 3 advantages to using internal security personnel in a pen test?

A
  1. Low cost
  2. Fast
  3. Enhances training
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What are 3 disadvantages to using internal security personnel?

A
  1. Insider knowledge
  2. Lack of expertise
  3. Reluctance to reveal findings
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What are 4 advantages to using external consultants for pen testing?

A
  1. Expertise
  2. Credentials
  3. Experience
  4. Focus
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is the primary disadvantage to using external consultants in a pen test?

A

Use of discovered information

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

A monetary award for uncovering a software vulnerability

A

Bug bounty

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What are three advantages to crowdsourcing pen testing?

A
  1. Fast
  2. Flexible
  3. Wide scope
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Scans for vulnerabilities and exploits them in a pen test

A

Red team

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Monitors for attackers and shores up defenses as necessary in a pen test

A

Blue team

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Enforces the rules in a pen test

A

White team

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Provides feedback to defenders and attackers during pen test

A

Purple team

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

A type of pen test where the attackers have no knowledge of the network nor special privileges

A

Black box

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

A type of pen test where the attackers are given limited knowledge of the network and some elevated privileges

A

Gray box

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

A type of pen test where attackers are given full knowledge of the network and the source code of applications

A

White box

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Limitations or parameters on the pen test

A

Rules of engagement

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What are 7 elements of the rules of engagement?

A
  1. Timing
  2. Scope
  3. Authorization
  4. Exploitation
  5. Communication
  6. Cleanup
  7. Reporting
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Less technical element of a report aimed at those in charge

A

Executive summary

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

A process, involving determination, resolve, and perseverance, in which a load balancer crates a link between an endpoint and a specific network server for the duration of a session

A

Persistence

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Gathering information from outside the organization

A

Footprinting

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Directly probing for vulnerabilities and useful information

A

Active reconnaissance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Searching for wireless signals from an automobile or on foot while using a portable computing device

A

War driving

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

An efficient means of discovering a WiFi signal using drones

A

War flying

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

An unmanned aerial vehicle without a human pilot

A

Drone

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

An aircraft without a human pilot on board to control its flight

A

Unmanned aerial vehicle (UAV)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

Searching online for publicly accessible information

A

Passive surveillance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

Publicly accessible information

A

Open source intelligence (OSINT)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

Moving to more advanced resources that are normally protected from an application or user

A

Privilege escalation

29
Q

Turning to other systems to be compromised

A

Pivoting

30
Q

A frequent and ongoing process, often automated, that continuously identifies vulnerabilities and monitors cybersecurity progress

A

Vulnerability scanning

31
Q

What are 7 ways that a pen test and vulnerability scan are different?

A
  1. Purpose
  2. Procedure
  3. Frequency
  4. Personnel
  5. Process
  6. Goal
  7. Audience
32
Q

What are 2 issues when conducting a vulnerability scan?

A
  1. Workflow interruptions
  2. Technical constraints
33
Q

A list of all significant assets

A

Asset inventory

34
Q

An examination of the software settings for a vulnerability scan

A

Configuration review

35
Q

Depth of a vulnerability scan

A

Sensitivity level

36
Q

4 elements of a configuration review include …

A
  1. Define target devices
  2. Ensure scan designed to meet intended goals
  3. Sensitivity level
  4. Specify data types
37
Q

A scan in which authenticated credentials, such as usernames and passwords, are supplied to the stability scanner to mimic the work of a threat actor who possesses these credentials

A

Credentialed scan

38
Q

A vulnerability scan that provides no authentication information to the tester

A

Non-credentialed scan

39
Q

A vulnerability scan that attempts to employ any vulnerabilities which it finds, much like a threat actor would

A

Intrusive scan

40
Q

A vulnerability scan that does not attempt to exploit the vulnerabilities which it finds, but o Lu records it was discovered

A

Non-intrusive scan

41
Q

A numeric rating system of the impact of a vulnerability

A

Common Vulnerability Scoring System (CVSS)

42
Q

A tool that consolidates real-time security monitoring and management of security information with analysis and reporting of security events

A

Security Information and Event Management (SIEM)

43
Q

Looking at normal behavior of users and how they interact with systems to create a picture of typical activity

A

User behavior analysis

44
Q

The process of computationally identifying and categorizing opinions, usually expressed in response to textual data, in order to determine the writer’s attitude toward a particular topic

A

Sentiment analysis

45
Q

A tool designed to help security teams manage and respond to the very high number of security warnings and alarms by combining comprehensive data gathering and analytics in order to automate incident response

A

Security Orchestration, Automation, and Response (SOAR)

46
Q

Proactively searching for cyber threats that this far have gone undetected in a network

A

Threat hunting

47
Q

Conducting unusual behavior when threat hunting

A

Maneuvering

48
Q

Cybersecurity data feeds that provide information on the latest threats

A

Threat feeds

49
Q

A formal repository of information from enterprises and the government used to share information on the latest attacks

A

Fusion center

50
Q

A series of documented processes used to define policies and procedures for implementation and management of security controls in an enterprise environment

A

Framework

51
Q

4 NIST framework elements

A
  1. Functions
  2. Categories
  3. Subcategories
  4. Information sources
52
Q

A guidance document designed to help organizations assess and manage risks to their information and systems

A

NIST Risk Management Framework

53
Q

A measuring stick against which companies can compare their cybersecurity practices relative to the threats they face

A

NIST Cybersecurity Framework

54
Q

A ISO standard that provides requirements for an information security management system

A

ISO 27001

55
Q

An extension of ISO 27001 that is a framework for managing privacy controls to reduce the risk of privacy breaches

A

ISO 27701

56
Q

An ISO “code of practice” for information security management within an organization and contains 114 different control recommendations

A

ISO 27002

57
Q

An ISO standard that contains controls for managing and controlling risk

A

ISO 31000

58
Q

An AICPA System and Organization control standard for reports on internal controls that reviews how a company safeguards consumer data and how well those controls are operating

A

SSAE SOC 2 Type II

59
Q

An AICPA System and Organization control standard for reports on internal controls that can be freely distributed

A

SSAE SOC 2 Type III

60
Q

A specialized framework of cloud-specific security controls

A

Cloud Controls Matrix

61
Q

An authoritative source of information

A

Reference architecture

62
Q

Standards typically developed by established professional organizations or government agencies using the expertise of seasoned security professionals

A

Regulations

63
Q

A document approved through consensus by a recognized standardization body

A

Standards

64
Q

A compliance standard to provide a minimum degree of security for handling customer card information

A

Payment Card Industry Data Security Standard (PCI DSS)

65
Q

Guidelines for configuring a device or software usually distributed by hardware manufacturers and software developers

A

Benchmark/Secure Configuration Guide

66
Q

Guidelines that only apply to specific products

A

Platform/vendor-specific guides

67
Q

Documents that are authored by technology bodies employing specialists, engineers, and scientists who are experts in those areas

A

Requests for Comment (RFCs)

68
Q

Cybersecurity information streams which include information on the latest vulnerabilities and threats

A
  1. Vulnerability feeds
  2. Threat feeds
69
Q

A database of the behavior of threat actors and how they orchestrate and manage attacks

A

Adversary tactics, techniques, and procedures (TTP)

ITSY-1300 (4 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions