Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

CISSP - Terms > Domain 3: Security Architecture and Engineering > Flashcards

Domain 3: Security Architecture and Engineering Flashcards

1
Q

Algorithm

A

A mathematical function used in the encryption and decryption processes. It may be quite simple or extremely complex. Also defined as the set of instructions by which encryption and decryption is done.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Asymmetric Encryption

A

Process that uses different keys for encryption than it does for decryption, and in which the decryption key is computationally infeasible to determine given the encryption key itself, from plaintext and corresponding ciphertext, or from knowledge of the key generation or encryption algorithm.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Block Mode Encryption

A

Using fixed-length sequences of input plaintext symbols as the unit of encryption.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Ciphertext

A

The altered form of a plaintext message so as to be unreadable for anyone except the intended recipients. In other words, it has been turned into a secret.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Collision

A

This occurs when a hash function generates the same output for different inputs. In other words, two different messages produce the same message digest.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Crime Prevention Through Environmental Design (CPTED

A

An architectural approach to the design of buildings and spaces, which emphasizes passive features to reduce the likelihood of criminal activity

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Cryptanalysis

A

The study of techniques for attempting to defeat cryptographic techniques and, more generally, information security services.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Cryptographic Hash, Cryptographic Hash Function

A

A process or function that transforms an input plaintext into a unique value called a hash (or hash value). These do not use cryptographic algorithms; the term “cryptographic” refers to the assertion that strong hash algorithms are one-way functions; that is, it is computationally infeasible to determine the input plaintext from the hash value and knowledge of the algorithm alone. Message digests are an example of the use of a cryptographic hash.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Cryptography

A

The study or applications of methods to secure or protect the meaning and content of messages, files, or other information, usually by disguise, obscuration, or other transformations of that content and meaning.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Cryptosystem

A

The complete set of hardware, software, communications elements, and procedures that allows parties to communicate, store information, or use information that is protected by cryptographic means. The system includes the algorithm, key, and key management functions, together with other services that can be provided through cryptography.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Cryptovariable

A

One or more parameters inherent to a particular cryptographic algorithm and its implementation in a cryptosystem. Block size, key length, and number of iterations (or rounds) are examples.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Decoding

A

The reverse process of encoding, converting the encoded message back into its plaintext format.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Decryption

A

The reverse process of encryption. It is the process of converting a ciphertext message back into plaintext using the cryptographic algorithm and appropriate key for decryption (which is the same for symmetric encryption, but different for asymmetric encryption). This term is also used interchangeably with “deciphering.”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Encoding

A

The action of changing a message or other set of information into another format using a code. Unlike encryption, which obscures or hides the meaning, encoded information can still be read by anyone with knowledge of the encoding process.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Encryption

A

The process and act of converting the message from its plaintext into ciphertext. Sometimes it is also referred to as enciphering. The two terms are sometimes used interchangeably in literature and have similar meanings.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Encryption System

A

The total set of algorithms, processes, hardware, software, and procedures that taken together provide an encryption and decryption capability.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Frequency Analysis

A

A form of cryptanalysis that uses the frequency of occurrence of letters, words, or symbols in the plaintext alphabet as a way of reducing the search space.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Hybrid Encryption System

A

A system that uses both symmetric and asymmetric encryption processes.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

In Band

A

Refers to transmitting or sharing control information, such as encryption keys and cryptovariables, over the same communications path, channel, or system controlled or protected by that information.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Key

A

The input that controls the operation of the cryptographic algorithm. It determines the behavior of the algorithm and permits the reliable encryption and decryption of the message.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Key Escrow

A

A process by which keys (asymmetric or symmetric) are placed in a trusted storage agent’s custody for later retrieval. The trustworthiness of the encryption system(s) being used is thus completely placed in the escrow agent’s control.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Symmetric cryptosystem

A

use a shared secret key available to all users of the cryptosystem

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Integrity

A

ensures that data is not altered without authorization

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Digital signatures

A

Message integrity is enforced through the use of encrypted message digests

a recipient can verify the message digest is valid and data not altered in transit

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

Key space

A

the range of values that are valid for use as a key for a specific algorithm

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

Kerckhoff’s Principle

A

that a cryptographic system should be secure even if everything about the system, except the key, is public knowledge

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

Cryptovariables

A

cryptographic keys

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

One way function

A

hash, mathematical operation that easily produces output values for each possible combination of inputs but makes it impossible to retrieve the input values

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

Nonce

A

is a random number that acts as a placeholder variable in mathematical functions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

Split knowledge

A

separation of duties and two-person control contained in a single solution

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

Recovery agent

A

the third party in a split knowledge setup, that uses the key escrow

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

Transposition Ciphers

A

uses an encryption algorithm to rearrange the letters of a plaintext message

Columnar transposition

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

Substitution cipher

A

use the encryption algorithm to replace each character or bit of the plaintext message with a different character

Caesar Cipher, ROT13, Vigenere system

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

One Time Pad

A

use a different substitution alphabet for each letter of the plaintext message.

  1. must be randomly generated
  2. must be physically protected against disclosure
  3. each one-time pad must only be used once
  4. the key must be as long as the message to be encrypted
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

Block cipher

A

operate on chunks or blocks, of a message and apply the encryption algorithm to an entire message block at the same time

most modern encryption algorithms use a type of block cipher

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

Stream cipher

A

operate on one character or bit of the message at a time

one-time pad, caesar cipher

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

Hybrid cryptography

A

Combines both Symmetric and Asymmetric key encryptions because of the slow speed of operation for asymmetric.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

Hashing collision

A

Occurs when a hash function creates the same value for two different methods. Two messages create the same hash value

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

Electronic Code Bock (ECB)

A

Least secure, encrypts blocks of 64 meaning encrypted blocks could repeat. More easy to break because of the less randomness

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

Cipher block Chaining Mode (CBC)

A

each block of unencrypted test is XORed with the block of ciphertext immediately preceding it before it is encrypted

encryption blocks are chained together

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

Cipher Feedback (CFB)

A

Streaming cipher version of CBC. Uses memory buffers in real time instead of blocks. bit by bit

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

Output feedback mode (OFB)

A

Ciphers operate in almost the same fashion as they do in CFB, but instead of being XORed it XORs the plaintext with a seed value, no chaining functions and transmission errors do not propogate

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

Counter Mode (CTR)

A

uses a stream cipher similar to that used in CFB and OFB Just uses a counter instead of a seed value

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

Galois/Counter Mode (GCM)

A

same as CTR but includes authentication tags to the encryption process for more authenticity

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
45
Q

Data Encryption Standard (DES)

A

56-bit and operates in long series of XOR operations, lots of flaws, not secure anymore. Operates in all the cipher modes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
46
Q

Triple DES

A

slightly stronger than DES, but 3 keys and longer 168-bit, flawed and should not be used

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
47
Q

Blowfish

A

Block cipher, 64-bit, key length 32-448 bits

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
48
Q

Skipjack

A

Block Cipher, 64-bit, 80-bit key

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
49
Q

Rivest cipher 4 (RC4)

A

Stream Cipher, 40-2048bits, key, no block size

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
50
Q

Rivest Cipher 5 (RC5)

A

block: 32, 64, 128 Key 0-2040

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
51
Q

Rivest Cipher 6 (RC6)

A

Block: 128, Key: 128, 192, 256

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
52
Q

Skipjack

A

Block Size: 64 Key 80

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
53
Q

3DES

A

Block size: 64 Key: 112 or 168

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
54
Q

CAST-128

A

Block: 64 Key: 40-128

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
55
Q

CAST-256

A

Block 128 Key: 128, 160,192, 224, 256

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
56
Q

Offline distribution

A

Physical exchanging of keys

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
57
Q

Public Key Encryption

A

Use of a public key to setup initial communication, once the link is established a secret key can be securely transferred over the public key link.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
58
Q

Hardware Security Module (HSM)

A

Dedicated hardware devices used to manage crypto keys. Expensive to implement

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
59
Q

Symmetric Key Exposure Formula

A

of keys = n(n-1) / 2

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
60
Q

Hashed Message Algorithm Code (HMAC)

A

implements a partial digital signature, guarantees the integrity of a message during transmissions

does not provide nonrepudiation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
61
Q

Digital Certificates

A

provide communication parties with the assurance that the people they are communicating with truly are who they claim to be.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
62
Q

Digital Certificate Standard

A

X.509 - which means they conform to the long list of data contained certificate.

serial number, issuer name, signature algorithm, validity period, public key, and more

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
63
Q

Certificate Authority

A

the glue that binds the public key infrastructure together, being a neutral organization that notarizes digital certificates.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
64
Q

Registration Authorities

A

assist Certificate authorities by taking the burden of verifying user’s identities prior to issuing a digital certificate.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
65
Q

Self-signed certificates

A

for use inside an organization, may be configured to trust the internal CA, saving some expense for obtaining it from a third party.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
66
Q

Certificate Signing Request

A

after properly enrolling with a CA by identifying yourself, this request takes your public key and the CA creates an X.509 digital certificate registered to you

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
66
Q

S/MIME

A

x.509 certificate for exchanging keys. Uses RSA encryption algorithm standard for encrypted email

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
66
Q

Transport Layer Security (TLS)

A

Uses the exchange of digital certificates to negotiate encryption/decryption between the browser and web server.
Creates that secure communication between a user browsing a website

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
66
Q

Perfect forward secrecy

A

layers of encryption prevent nodes in the relay chain from reading anything other than the specific information they need to accept and forward the traffic

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
67
Q

Steganography

A

art of using cryptographic techniques to embed secret messages within another message

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
68
Q

Link Encryption

A

protects communication circuits by creating a secure tunnel between two points. Everything including the header, trailer, address, and routing data is encrypted

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
69
Q

End-to-End Encryption

A

protects communication between two parties and is performed independently of link encryption
Faster that link because it does not encrypt headers, addresses, routing data and therefor susceptible to eavesdropping

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
70
Q

IPsec

A

Provides complete infrastructure for secured network communications.

71
Q

Tunnel Mode

A

IPsec, entire packet including the header is encrypted in communication.

72
Q

Transport mode

A

only the packet payload is encrypted for end-to-end encryption

73
Q

Security Association

A

the session you create with IPsec, represents the communication session and records and configuration and status information about the connection.

74
Q

Homomorphic encryption

A

technology that allows you to perform computations on data that is encrypted,

75
Q

Analytic Attack

A

algebraic manipulation that attempts to reduce the complexity of the algorithm

76
Q

Implementation Attack

A

exploits weaknesses in the implementation of the cryptographic system. Exploiting software code

77
Q

Statistical Attack

A

attacks statistical weaknesses like floating point errors, and the inability to produce truly random numbers

78
Q

Fault Injection Attack

A

attackers attempt to compromise the integrity of the cryptographic device causing some internal error

79
Q

Side-Channel Attack

A

Attack the systems surrounding the cryptography to find changes in cpu, power consumption, etc.

80
Q

Timing Attack

A

Type of side channel attack that measures precisely how long it takes to encrypt something.

81
Q

Replay Attack

A

Capturing the encrypted message, and then ‘replays’ that message to initiate a session

82
Q

Closed System

A

designed to work well with a narrow range of other systems

83
Q

Open system

A

designed using agreed-upon industry standards, much easier to integrate with out manufacturers.

84
Q

Fail-Securely

A

it will fail in a secured manner by default if there is a system crash, reducing potential data exposure and other security risks

85
Q

Fail-Soft

A

Allows a system to keep running after a component fails

86
Q

Fail-Safe

A

When a failure occurs, the system will revert back to a point that protects the health and safety of people.

Emergency door must open always, despite the risk

87
Q

Don’t Repeat Yourself

A

Eliminate redundancy by not having the same code in multiple places

88
Q

Computing Minimalism

A

Craft code to use the least necessary hardware.

89
Q

Worse is Better

A

quality of software does not necessarily get better with more capabilities or functions.

90
Q

Zero Trust

A

nothing inside the organization is automatically trusted.

Every request for access or activity is assumed to be from an unknown or untrusted location. everything is always verified

Assume a breach has already occured

91
Q

Privacy by Design

A

guideline to integrate privacy protections into products during the early design phase rather than tacking it on later.

92
Q

Trusted Computing Base

A

design principle that is the combination of hardware, software, and controls hat work together to form a trusted base to enforce your security policy .

93
Q

State Machine Model

A

Describes a system in which is always secure no matter the state it is in.

94
Q

Secure state machine

A

system always boots in a secure state, maintains a secure state across all transitions

95
Q

Information Flow Model

A

Focuses on controlling the flow of information, based on the state model, Look at how information flows and whether or not its secure

96
Q

Bell-LaPadula Model

A

Dept of Def, clearance levels and need to know,

Can’t read a higher clearance level, and you can’t write DOWN to a lower clearance level.

97
Q

Biba Model

A

Opposite of Bell-LaPadula, More about the modification of objects and data. Designed to address integrity issues of objects

Lacks confidentiality and availability

98
Q

Clark-Wilson Model

A

Multifaceted approach to enforcing data integrity where the formal state machine limits modification to a system through a limited or controlled intermediary program or interface

Restricted Interface Model

Enforces separation of duties

99
Q

Brewer and Nash Model

A

permits access controls to change dynamically based on user’s previous activities.

100
Q

Goguen–Meseguer model

A

An integrity model based on predetermining the set or domain of objects that a subject can access.

Foundation of noninterference model

101
Q

noninterference model

A

A model loosely based on the information flow model. The noninterference model is concerned with the actions of one subject affecting the system state or actions of another subject.

102
Q

Sutherland model

A

An integrity model that focuses on preventing interference in support of integrity.

103
Q

Graham–Denning model

A

A security model focused on the secure creation and deletion of both subjects and objects.

104
Q

Harrison–Ruzzo–Ullman (HRU) model

A

A security model that focuses on the assignment of object access rights to subjects as well as the resilience of those assigned rights. It is an extension of the Graham–Denning model.

105
Q

Common Criteria (CC)

A

The loosely used phrase for the combination of the Common Criteria for IT Security Evaluation (CC) and the Common Methodology for IT Security Evaluation (CEM). Together these form the Common Criteria Recognition Agreement (CCRA). Simplified, this provides a means via the Common Criteria certification process for independently evaluating products in licensed labs and providing a level of assurance regarding product security. Defined in ISO/IEC 15408.

106
Q

authorization to operate (ATO)

A

Often related to government or military agencies or contractors, an ATO is the formal approval to perform business functions once compliance with a contract, standard, framework, or regulation is confirmed. An ATO is often issued for a limited period of time and can be lost or canceled by the approving authority at any time based on any significant change to the environment.

107
Q

Authorizing Official (AO)

A

An authorized entity who can evaluate an IT/IS system, its operations, and its risks, and potentially issue an ATO. Aka designated approving authority (DAA), Approving Authority (AA), Security Control Assessor (SCA), and Recommending Official (RA).

5 years

108
Q

Trusted Platform Module (TPM)

A

A specification for a cryptoprocessor as well as the chip in a mainboard supporting this function. A TPM chip is used to store and process cryptographic keys for the purposes of a hardware- supported/implemented hard drive encryption system.

109
Q

constrained interface

A

An access control used in applications that restrict what users can do or see based on their assigned privileges. Subjects with restricted privileges have limited access. Aka restricted interface.

110
Q

fault tolerance

A

The ability of a system to suffer a fault but continue to operate and/or without losing data. Fault tolerance is achieved by adding redundant components such as additional disks within a redundant array of independent disks (RAID) or additional servers within a failover clustered configuration.

111
Q

Multitasking

A

A system handling two or more tasks simultaneously

112
Q

Multicore

A

A CPU chip containing two, four, eight, dozens, or more independent execution
cores that can operate simultaneously and/or independently. There are even some specialty
chips with over 10,000 cores.

113
Q

Multiprogramming

A

The pseudo-simultaneous execution of two tasks on a single processor
coordinated by the operating system for the purpose of increasing operational efficiency.
Multiprogramming is considered a relatively obsolete technology and is rarely found in use
today except in legacy systems.

114
Q

Multithreading

A

A process that allows multiple users to use the same process without interfering with each other

115
Q

Protection Rings

A

A security design that organizes code and components in an operating system
(as well as applications, utilities, or other code that runs under the operating system’s control) into
concentric rings, each having increasing or decreasing levels of capabilities and access

Ring 0: OS Kernel/Memory
Ring 1: Other OS Components
Ring 2: Drivers, protocols
Ring 3: User-level programs

116
Q

Privileged Mode

A

The mode designed to give the operating system access to the full range
of instructions supported by the CPU. Aka kernel mode. See also protected mode.

Ring 0-2

117
Q

Mediated-access model

A

When a process that runs in a higher-numbered ring must ask a
handler or a driver in a lower-numbered ring for services they need. Aka system call.

118
Q

electrically erasable programmable read-only memory (EEPROM)

A

A version of ROM
that can be erased with an electrical signal. EEPROMs can be erased without removal from
the computer, giving them much greater flexibility than standard PROM and EPROM chips.
Sometimes referred to incorrectly as electronically erasable PROM (EEPROM).

119
Q

Read-only memory

A

Memory that can be read but cannot be written to.

119
Q

programmable read-only memory (PROM)

A

A PROM chip that does not have its contents
“burned in” at the factory as is done with standard ROM chips. Instead, special functionality
is installed that allows the end user to burn in the contents of the chip.

120
Q

Flash memory

A

A concept derived from EEPROM. It is a nonvolatile form of storage
media that can be electronically erased and rewritten. The primary difference between
EEPROM and flash memory is that EEPROM must be fully erased to be rewritten whereas
flash memory can be erased and written in blocks or pages. The most common type of flash
memory is NAND flash. It is widely used in memory cards, thumb drives, mobile devices,
and SSDs (solid-state drives).

121
Q

Random Access Memory (RAM)

A

Readable and writable memory that contains information
the computer uses during processing. RAM retains its contents only when power is continuously supplied to it.

122
Q

Cache RAM

A

A process that takes data from slower devices and temporarily stores it in
higher-performance devices when its repeated use is expected.

123
Q

Register

A

A limited amount of onboard memory in a CPU.

124
Q

register address

A

The address of a register, which is a small memory location directly on the CPU. When the CPU needs information from one of those registers to complete an operation, it can simply use the register address (for example, “register one”) to access the information.

125
Q

immediate addressing

A

A way of referring to data that is supplied to the CPU as part of an instruction.

126
Q

memory addressing

A

The means of referring to various locations in memory. See register addressing, immediate addressing, direct addressing, indirect addressing, and base+offset addressing.

127
Q

direct addressing

A

A process by which the CPU is provided with the actual address of the memory location to be accessed.

128
Q

indirect addressing

A

The memory address that is supplied to the CPU as part of the instruction and doesn’t contain the actual value that the CPU is to use as an operand. Instead, the memory address contains another memory address (perhaps located on a different page). The CPU then retrieves the actual operand from that address.

129
Q

base+offset addressing

A

An addressing scheme that uses a value stored in one of the CPU’s registers as the base location from which to begin counting. The CPU then adds the offset supplied with the instruction to that base address and retrieves the operand from the computed memory location.

130
Q

secondary memory

A

Magnetic/optical media and other storage devices that contain data not immediately available to the CPU.

131
Q

swap file, pagefile, paging file

A

A special storage file used when virtual memory is enabled to use space on a storage device to expand the addressable memory space of a system.

132
Q

virtual memory

A

A special type of secondary memory that is managed by the operating system in such a manner that it appears to be real memory.

133
Q

primary storage

A

The RAM that a computer uses to keep necessary information readily available.

134
Q

secondary storage

A

Data repositories that include magnetic and optical media, such as tapes, disks, hard drives, and CD/DVD storage.

135
Q

volatile storage

A

A storage medium, such as RAM, that loses its contents when power is removed from the resource.

136
Q

nonvolatile storage

A

A storage system that does not depend on the presence of power to maintain its contents, such as magnetic/optical media and nonvolatile RAM (NVRAM).

137
Q

random access storage

A

Devices, such as RAM and hard drives, that allow the operating system to request contents from any point within the media.

138
Q

sequential storage

A

Devices that require that you read (or speed past) all of the data physically stored prior to the desired location. A common example of a sequential storage device is a magnetic tape drive.

139
Q

data remnants, data remanence

A

Data that remains on media after the data has been supposedly removed. Sanitization methods attempt to ensure that all data is removed from media without any data remnants/remanence remaining.

140
Q

emanations

A

Electromagnetic or radio frequency signals that may contain data that can be intercepted through eavesdropping on those signals.

141
Q

TEMPEST

A

The study and control of electronic signals produced by various types of electronic hardware, such as computers, televisions, phones, and so on. Its primary goal is to prevent EM and RF radiation from leaving a strictly defined area so as to eliminate the possibility of external radiation monitoring, eavesdropping, and signal sniffing.

142
Q

Unified Extensible Firmware Interface (UEFI)

A

A replacement or improvement to the basic input/output system (BIOS) that provides support for all of the same functions as BIOS with many improvements, such as support for larger hard drives (especially for booting), faster boot times, enhanced security features, and even the ability to use a mouse when making system changes (BIOS was limited to keyboard control only). See measured boot.

143
Q

BIOS (Basic Input/Output System)

A

The basic low- end firmware or software embedded in the hardware’s electrically erasable programmable read- only memory (EEPROM). See also Unified Extensible Firmware Interface (UEFI).

144
Q

applet

A

Code objects sent from a server to a client to perform some action. Applets are self- contained miniature programs that execute independently of the server that sent them.

145
Q

parallel data systems, parallel computing

A

A computation system designed to perform numerous calculations simultaneously. Parallel data systems often go far beyond basic multiprocessing capabilities. They often include the concept of dividing up a large task into smaller elements and then distributing each subelement to a different processing subsystem for parallel computation. This implementation is based on the idea that some problems can be solved efficiently if they are broken into smaller tasks that can be worked on concurrently. Aka large- scale parallel data systems.

146
Q

symmetric multiprocessing (SMP

A

A type of system in which the processors share not only a common operating system but also a common data bus and memory resources. The collection of processors also works collectively on a single task, code, or project.

147
Q

asymmetric multiprocessing (AMP)

A

A form of multiprocessing where the processors are often operating independently of each other. Usually each processor has its own OS and/or task instruction set. Under AMP, processors can be configured to execute only specific code or to operate on specific tasks (or vice versa, where specific code or tasks are allowed to run only on specific processors; this might be called affinity in some circumstances).

148
Q

grid computing

A

A form of parallel distributed processing that loosely groups a significant number of processing nodes toward the completion of a specific processing goal.

149
Q

industrial control system (ICS

A

A form of computer- management device that controls industrial processes and machines. ICSs are used across a wide range of industries, including manufacturing, fabrication, electricity generation and distribution, water distribution, sewage processing, and oil refining. There are several forms of ICS, including distributed control systems (DCSs), programmable logic controllers (PLCs), and supervisory control and data acquisition (SCADA).

150
Q

SCADA (Supervisory Control and Data Acquisition)

A

A type of industrial control system (ICS). An ICS is a form of computer- management device that controls industrial processes and machines.

151
Q

High-performance Computing

A

Computing platforms designed to perform complex calculations or data manipulations at extremely high speeds. Supercomputers and MPP solutions are common examples of HPC systems. HPC systems are used when real- time or near- real- time processing of massive data is necessary for a particular task or application. These applications can include scientific studies, industrial research, medical analysis, societal solutions, and commercial endeavors.

152
Q

real- time operating system (RTOS)

A

An OS designed to process or handle data as it arrives on the system with minimal latency or delay. An RTOS is usually stored on read- only memory (ROM) and is designed to operate in a hard real- time or soft real- time condition.

153
Q

Industrial Internet of Things (IIoT)

A

A derivative of IoT that focuses more on industrial, engineering, manufacturing, or infrastructure level oversight, automation, management, and sensing. IIoT is an evolution of ICS and DCS that integrates cloud services to perform data collection, analysis, optimization, and automation.

154
Q

edge computing

A

A computation architecture that is part of the Industrial Internet of Things (IIoT). In edge computing, the intelligence and processing are contained within each device, which is at or near the edge of the network. See fog computing.

155
Q

embedded system

A

A computer implemented as part of a larger system. The embedded system is typically designed around a limited set of specific functions in relation to the larger product of which it’s a component. It may consist of the same components found in a typical computer system, or it may be a microcontroller (an integrated chip with on- board memory and peripheral ports).

156
Q

static system, static environment

A

A set of conditions, events, and surroundings that don’t change. In theory, once understood, a static environment doesn’t offer new or surprising elements. A static IT environment is any system that is intended to remain unchanged by users and administrators. The goal is to prevent or at least reduce the possibility of a user implementing change that could result in reduced security or functional operation.

157
Q

network-enabled devices

A

Any type of device (whether mobile or stationary) that has native network capabilities. This generally assumes the network in question is a wireless type of network, primarily that provided by a mobile telecommunications company. However, it can also refer to devices that connect to Wi- Fi (especially when they can connect automatically), devices that share data connectivity from a wireless telco service (such as a mobile hot spot), and devices with RJ- 45jacks to receive a standard Ethernet cable for a wired connection.

158
Q

cyberphysical system, cyber- physical system

A

A computer system that can interact with the real world, such as take measurements with a sensor, control lights, open doors, turn on motors, and so forth. See Internet of Things (IoT) and industrial control system (ICS).

159
Q

multifunction devices (MFDs)

A

Devices that are combinations of several products into one, such as a combined printer, scanner, and fax machine. Aka all- in- one device. See multifunction printers (MFPs).

160
Q

wrapper

A

Something used to enclose or contain something else. Wrappers are well known in the security community in relation to Trojan horse malware. A wrapper of this sort is used to combine a benign host with a malicious payload. Wrappers are also used as encapsulation solutions. Some static environments may be configured to reject updates, changes, or software installations unless they’re introduced through a controlled channel or wrapper.

161
Q

micro-services, micro-API, microservices

A

An emerging feature of web- based solutions that derives from service- oriented architecture (SOA). A micro- service is simply one element, feature, capability, business logic, or function of a web application that can be called upon or used by other web applications.

162
Q

service- oriented architecture (SOA)

A

A means to construct new applications or functions out of existing but separate and distinct software services.

163
Q

infrastructure as code (IaC)

A

Infrastructure as code is a change in how hardware management is perceived and handled. Instead of seeing hardware configuration as a manual, direct hands- on, one- on- one administration hassle, it is viewed as just another collection of elements to be managed in the same way that software and code are managed under DevOps

164
Q

virtualization

A

A technology used to host one or more operating systems within the memory of a single host computer. This mechanism allows practically any operating system to operate on any hardware. Aka virtualization technology.

165
Q

hypervisor

A

The component of virtualization that creates, manages, and operates the virtual machines. The computer running the hypervisor is known as the host and the OSs running within a hypervisor- supported virtual machine are known as guest OSs. Aka virtual machine monitor (VMM) and virtual machine manager (VMM).

166
Q

type 1 hypervisor

A

A native or bare- metal hypervisor. In this configuration, there is no host operating system (OS); instead, the hypervisor installs directly onto the hardware where the host OS would normally reside.

167
Q

type 2 hypervisor

A

A hosted hypervisor. In this configuration, a standard regular operating system (OS) is present on the hardware, and then the hypervisor is installed as another software application.

168
Q

virtual application

A

A software product deployed in such a way that it is fooled into believing it is interacting with a full host OS. A virtual (or virtualized) application has been packaged or encapsulated so that it can execute but operate without full access to the host OS or platform. Aka guest application and virtual software.

169
Q

containerization

A

The next step in the evolution of the virtualization trend for both internally hosted systems and cloud providers and services. Containerization is based on the concept of eliminating the duplication of OS elements and removing the hypervisor altogether. Instead, each application is placed into a container that includes only the resources needed to support the enclosed application. There are many different technological solutions that are grouped into the concept of containerization. Some refer to the application instances as containers, zones, cells, virtual private servers, partitions, virtual environments, virtual kernels, or jails. Aka OS virtualization.

170
Q

unified endpoint management (UEM

A

A type of software tool that provides a single management platform to control mobile, PC, IoT, wearables, ICS, and other devices. It replaces mobile device management (MDM) and enterprise mobility management (EMM) products.

171
Q

mobile application management (MAM)

A

A software product similar to a mobile device management (MDM) product, but it focuses on app management rather than the entire mobile device.

172
Q

geofencing

A

The designation of a specific geographical area that is then used to implement features on mobile devices. A geofence can be defined by GPS coordinates, wireless indoor positioning systems, or presence or lack of a specific wireless signal.

173
Q

process isolation

A

One of the fundamental security procedures put into place during system design. Basically, using process isolation mechanisms (whether part of the operating system or part of the hardware itself) ensures that each process has its own isolated memory space for storage of data and the actual executing application code itself

174
Q

covert timing channel

A

A channel that conveys information by altering the performance of a system component or modifying a resource’s timing in a predictable manner.

175
Q

covert storage channel

A

A channel that conveys information by writing data to a common storage area where another process can read it.

176
Q

covert channel

A

The means by which data can be communicated outside of normal, expected, or detectable methods. See covert storage channel and covert timing channel.

CISSP - Terms (8 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions