Chapter 7

Question 1

a third-party service that monitors a network for any unusual activity

Answer 1

advanced malware management

Question 2

a device used to combine multiple network connections into a single link.

Answer 2

aggregation switch

Question 3

see container

Answer 3

application cell

Question 4

an inventory of applications and associated components (libraries, configuration files, etc.) that have been pre-approved and authorized to be active and present on the device.

Answer 4

application whitelisting

Question 5

a set of software tools or services that reside between the enterprises’ on-premises infrastructure and the cloud provider’s infrastructure to ensure that the security policies of the enterprise extend to their data in the cloud.

Answer 5

cloud access security broker (CASB)

Question 6

a pay-per-use computing model in which customers pay only for the online computing resources that they need, and the resources can be easily scaled.

Answer 6

cloud computing

Question 7

a cloud system that has no computational capabilities but provides remote file storage

Answer 7

cloud storage

Question 8

a cloud that is open only to specific organizations that have common concerns

Answer 8

community cloud

Question 9

a virtualized environment that holds only the necessary operating system components (such as binary files and libraries) that are needed for a specific application to run. Also called an application cell.

Answer 9

container

Question 10

a device that aggregates and correlates content from different sources to uncover an attack.

Answer 10

correlation engine

Question 11

a microsoft windows feature that prevents attackers from using buffer overflow to exe

Answer 11

data execution prevention (DEP)