Domain 5

Question 1

Application server

Answer 1

A computer responsible for hosting applications to user workstations

Question 2

Asymmetric encryption

Answer 2

An algorithm that uses one key to encrypt and a different key to decrypt the input plain text

Question 3

Check s u m

Answer 3

A digit representing the sum of the correct digits in a piece of stored or transmitted digital data, against which later comparisons can be made to detect errors in the data

Question 4

Cipher text

Answer 4

The altered form of a plain text message so it is unreadable for anyone except the intended recipients. In other words, it has been turned into a secret

Question 5

Classification

Answer 5

Classification identifies the degree of harm to the organization, at stakeholders or others that might result if an information asset is divulged into an unauthorized person process or organization

Question 6

Configuration management

Answer 6

A process and discipline used to ensure that the only changes made to a system are those that have been authorized and validated

Question 7

Cryptanalyst

Answer 7

One who performs crimp Krypt analysis which is the study of mathematical techniques for attempting to defeat cryptographic techniques and/or Information Systems security

Question 8

Cryptography

Answer 8

The study your applications of methods to secure or protect the meaning and content of messages, files, or other information, usually by disguise, obscuration, or other transformations of that content and meeting

Question 9

Data loss prevention or DLP

Answer 9

System capabilities designed to detect and prevent the unauthorized use and transmission of information

Question 10

Decryption

Answer 10

The reverse process from encryption. It is the process of converting a ciphertext message back into plain text through the use of cryptographic algorithm and the appropriate key for decryption which is the same for symmetric encryption, but different for asymmetric encryption. This term is also used interchangeably with deciphering

Question 11

Degasing

Answer 11

A technique of erasing data on disc or tape including videotapes.com when perform properly, ensures that there is an insufficient magnetic remnants to reconstruct data

Question 12

Digital signature

Answer 12

The result of a cryptographic transformation of data which when used properly provides the services of origin authentication, data integrity, and sign or non-repudiation

Question 13

Egress monitoring

Answer 13

Monitoring of outgoing Network traffic

Question 14

Encryption

Answer 14

The process and act of converting the message from its plain text to ciphertext. Sometimes it is also referred to as insiphering. The two terms are sometimes used interchangeably in literature and have the same meaning

Question 15

Encryption system

Answer 15

The total set of algorithms, processes, hardware, software, and procedures that taken together provide an encryption and decryption capability

Question 16

Hardening

Answer 16

A reference to the process of applying secure configurations to reduce the attack surface and locking down various hardware, communication systems, and software including operating system, web server, application server, Etc hardening is normally performed based on industry guidelines and benchmarks, such as those provided by the center for Internet Security or CIS

Question 17

Hash function

Answer 17

An algorithm that computes a numerical value called the hash value on a data file or electronic message that is used to represent that file or message and depends on the entire contents of the file or message

Question 18

Hashing

Answer 18

The process of using a mathematical algorithm against data to produce a numeric value that is representative of that data

Question 19

Information sharing

Answer 19

The requirements for information sharing by an IT system with one or more other it systems or applications, for information sharing to support multiple internal or external organizations, missions, or public programs

Question 20

Ingress monitoring

Answer 20

Monitoring of incoming Network traffic

Question 21

Message Digest

Answer 21

A digital signature that uniquely identifies data and has the property such that changing a single bit in the data will cause a completely different message digest to be generated

Question 22

Operating system

Answer 22

The software Master Control application that runs the computer.

Question 23

Patch

Answer 23

A software component that, when installed, directly modifies files or device settings related to a different software component without changing the version number or release details for the related software component

Question 24

Patch management

Answer 24

The systematic notification identification, deployment, installation and verification of operating system and application software code revisions these revisions are known as patches

Question 25

Plain text

Answer 25

A message or data and it’s natural format and in readable form or extremely vulnerable from a confidentiality perspective

Question 26

Records

Answer 26

The recordings of evidence of activities performed or results achieved which serve as a basis for verifying that the organization and the information system are performing as intended

Question 27

Records retention

Answer 27

A practice based on the records life cycle, according to which records are retained as long as necessary, and then are destroyed after the appropriate time interval has elapsed

Question 28

Remnants

Answer 28

Residual information remaining on storage media after clearing

Question 29

Request for change or RFC

Answer 29

The first stage of change management, we’re in a change in procedure or product is sought by a stakeholder

Question 30

Security governance

Answer 30

The entirety of the policies, roles, and processes the organization uses to make security decisions in an organization

Question 31

Social engineering

Answer 31

Tactics to infiltrate systems via email, phone, text, or social media, often impersonating a person or agency in Authority or offering a gift. A low-tech method would be simply following someone into a secure building

Question 32

Symmetric encryption

Answer 32

An algorithm that uses the same key in both the encryption and decryption processes

Question 33

Web server

Answer 33

A computer that provides worldwide web or www.services on the Internet it includes the hardware, operating system, web server software, and website content.

Question 34

Whaling attack

Answer 34

Phishing attacks that attempt to trick highly placed officials or private individuals with sizable assets into an authorizing a large fund wire transfer to previously unknown entities