Extra Terms Flashcards

1
Q

What is PKI?

A

A framework of programs, procedures, communication protocols, and public key cryptography that enables a diverse group of individuals to communicate securely.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What does OWASP stand for?

A

Open Web Application Security Project, an international nonprofit that focuses on identifying software vulnerabilities and educating developers in the practice of secure coding.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What are Joint Operating Agreements?

A

Agreements that provide nearby relocation sites so disruption is limited to the organization’s own facility/campus and can be addressed at a different location.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What are the layers of the OSI Model?

A

Physical; Data Link; Network; Transport; Session; Presentation; Application.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is the Cross-Certification Model?

A

A model where every participating organization has to review and approve every other organization; does not scale well.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is FPE?

A

Format-Preserving Encryption, a technique used to scramble contents of data using a mathematical algorithm while keeping the structural arrangement of the data.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What are the Logging Levels?

A

OFF > FATAL > ERROR > WARN > INFO > DEBUG > TRACE > ALL.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What does OFF mean in Logging Levels?

A

Used to turn off logging.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What does FATAL mean in Logging Levels?

A

Indicates the application is about to stop due to a serious problem/corruption; the situation is catastrophic.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What does ERROR mean in Logging Levels?

A

Indicates an inability to access a service/file; a severe issue is stopping functions within the application from operating efficiently.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What does WARN mean in Logging Levels?

A

Indicates a detected unexpected application problem.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What does INFO mean in Logging Levels?

A

Indicates normal behavior of applications.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What does DEBUG mean in Logging Levels?

A

Provides diagnostic information in a detailed manner for diagnosing, troubleshooting, or testing an application.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What does TRACE mean in Logging Levels?

A

Captures all details about the behavior of the application; used to see events within the application and what happened in third-party libraries.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What does ALL mean in Logging Levels?

A

Shows all or custom logged definitions.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is the Management Plane?

A

Technology that allows an admin to remotely manage a fleet of servers; logical infrastructure design used to configure cloud resources.

17
Q

What is the role of the Information Commissioner?

A

Responsible for enforcing the UK’s GDPR and offering advice and assistance to both the council and individual groups whose information is being held.

18
Q

What is the NIS Directive?

A

The first piece of EU-wide cybersecurity legislation; requires notification to competent authorities or CSIRT.

19
Q

What is NIST 800-145?

A

The NIST definition of Cloud Computing; a model for enabling ubiquitous, convenient, on-demand network access to a shared pool of configurable computing resources.

20
Q

What does NIST 800-146 cover?

A

Reprises the NIST-established definition of cloud computing, describes benefits and open issues, and provides guidelines and recommendations.

21
Q

What are Functional Requirements?

A

Performance aspects necessary for a business task to be accomplished.

Example: A salesperson in the field must be able to connect to the organization’s network remotely.

22
Q

What are Nonfunctional Requirements?

A

Aspects that are not necessary for accomplishing a business task but are desired or expected.

Example: The salesperson’s remote connection must be secure.

23
Q

What are DFDs?

A

Data Flow Diagrams, useful in systems/software engineering to establish functional requirements before technology selection.

24
Q

What is Eucalyptus?

A

Computer software for building AWS-compatible private/hybrid cloud computing environments; supports multitenancy.

25
What does ISO/IEC 17788 provide?
An overview of cloud computing and a set of terms and definitions.
26
What is NIST 500-292?
Guidelines for the adoption of cloud computing into the Federal Government.
27
What are Metastructure protocols?
Protocols and mechanisms that provide the interface between the infrastructure layer and other layers.
28
What is PRE?
Proxy Re-Encryption, which allows a proxy to convert ciphertext encrypted under one key into an encryption of the same message under another key.
29
What is Software-Defined Infrastructure?
Technical computing infrastructure entirely under the control of software with no operator or human intervention.
30
What is Chaos Engineering?
A method of testing software that deliberately introduces failure and faulty scenarios to verify resilience.
31
What is Microsoft's SDL?
Security Development Lifecycle, a software development process based on the spiral model to help developers create secure applications.
32
What does NIST 800-92 cover?
Log management.
33
What does NIST 800-40 address?
Enterprise patch management planning.
34
What are the types of backups?
Full; Copy; Differential; Incremental.
35
What is Differential backup?
Backs up all data changed since the last full backup. ## Footnote Example: If a full backup was done on Sunday, a differential backup on Monday will include only files changed since Sunday.
36
What is Incremental backup?
Backs up data that changed since the last backup; can be time-consuming to restore data.