Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

Cyber Security > Glossary Terms > Flashcards

Glossary Terms Flashcards

1
Q

Cybersecurity (or Security)

A

The practice of ensuring confidentiality, integrity, and availability of information by protecting networks, devices, people, and data from unauthorized access or criminal exploitation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Cloud security

A

The process of ensuring the assets stored in the cloud are properly configured, and access to those assets, is limited by authorized users

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Internal threat

A

A current, or former employee, external vendor, or trusted partner, who poses our security risk

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Network security

A

The practice of keeping in organizations network infrastructure secure from unauthorized access

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Personally, identifiable information (PII)

A

Any information used to infer an individuals identity. includes: someone’s full name, date of birth, physical address, phone number, email address, Internet, protocol, IP address, and similar information 

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Sensitive personally identifiable information (SPII)

A

A specific type of PII that falls under stricter handling guidelines. May include: Social Security numbers, medical, our financial information, and biometric data, such as facial recognition.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Technical skills

A

Skills that require knowledge of specific tools, procedures, and policies. Which include: programming, languages, secure, information, and event management (SIEM) tools, intrusion detection systems (IDSs), threat, landscape, knowledge, incident response.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Threat

A

Any circumstance, or event that can negatively impact assets

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Threat actor

A

Any person or group represents a security risk

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Transferable skills

A

Skills from other areas that can apply to different careers. Which includes: communication, collaboration, analysis, problem-solving.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Absolute file path

A

The full file path, which starts from the root

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Access controls

A

Security controls that manage access, authorization, and accountability of information

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Active packet sniffing

A

A type of attack where data packets are manipulated in transit

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Address resolution protocol (ARP)

A

Network protocol used to determine the MAC ADDRESS OF THE NEXT ROUTER OR DEVICE TO TRAVERSE

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Advanced persistent threat (APT)

A

An instance where a threat actor maintains unauthorized access to a system for an extended period of time

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Adversarial artificial intelligence (AI)

A

A technique that manipulates artificial intelligence (AI) and machine learning (ML) technology to conduct attacks more efficiently

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Adware

A

A type of legitimate software that is sometimes used to display digital advertisements in applications

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Algorithm

A

A set of rules to solve a problem

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Analysis

A

The investigation and validation of alerts

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Angler phishing

A

A technique where attackers impersonate customer service representatives on social media 

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Anomaly-based analysis

A

Detection method that identifies abnormal behavior

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Antivirus software

A

A software program used to prevent, detect, and illuminate malware and viruses

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Application

A

A program that performs a specific task

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Application programming interface (API) token

A

A small block of encrypted code that contains information about a user

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

Argument (Linux)

A

Specific information needed by a command

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

Argument (python)

A

The data brought into a function when it is called

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

Array

A

Data type that stores data in a comma-separated ordered list

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

Assess

A

The fifth step of the NIST RMF that means to determine if established controls are implemented correctly

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

Asset

A

An item perceived as having value to an organization

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

Asset classification

A

The practice of labeling assets based on sensitivity and importance to an organization

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

Asset inventory

A

A catalog of assets that need to be protected

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

Asset management

A

The process of tracking assets and the risks that affect them

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

Asymmetric encryption

A

The use of a public and private key pair for encryption and decryption of data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

Attack surface

A

All the potential vulnerabilities that a threat actor could exploit

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

Attack tree

A

A diagram that maps threats to assets

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

Attack vectors

A

The pathways attackers used to penetrate security defenses

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

Authentication

A

The process of verifying who someone is

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

Authorization

A

The concept of granting access to specific resources in a system

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

Authorize

A

The sixth step of the NIST RMF that refers to being accountable for the security and privacy risks that might exist in an organization

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

Automation

A

The use of technology, to reduce human and manual effort to perform common and repetitive tasks

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

Availability

A

The idea that data is accessible to those who are authorized to access it

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

Baiting

A

A social engineering tactic that tempts people into compromising their security

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

Bandwidth

A

The amount of data a device receives every second

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

Baseline configuration (baseline image)

A

A documented set of specifications within a system that is used as a basis for future builds, releases, and updates

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
45
Q

Bash

A

The default shell in most Linux distributions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
46
Q

Basic auth

A

The technology used to establish a users request to access a server

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
47
Q

Basic input/output system (BIOS)

A

A microchip that contains loading instructions for the computer and is prevalent in older systems

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
48
Q

Bootloader

A

A software program that boots the operating system

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
49
Q

Biometrics

A

The unique physical characteristics that can be used to verify a persons identity

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
50
Q

Boolean data

A

Data that can only be one of two values: either true or false

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
51
Q

Botnet

A

A collection of computers infected by malware that are under the control of a single threat actor, known as a “bot-herder”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
52
Q

Bracket notation

A

The indices placed in square brackets

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
53
Q

Broken chain of custody

A

Inconsistencies in the collection of logging of evidence in the chain of custody

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
54
Q

Brute force attack

A

The trial and error process of discovering private information

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
55
Q

Bug bounty

A

Programs that encourage freelance hackers to find and report vulnerabilities

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
56
Q

Built-in function

A

A function that exists within python and can be called directly

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
57
Q

Business email compromise (BEC)

A

A type of phishing attack where a threat actor impersonates a known source to obtain financial advantage

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
58
Q

Business continuity

A

An organizations ability to maintain their every day productivity by establishing risk disaster. Recovery plans.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
59
Q

Business continuity plan (BCP)

A

A document that outlines the procedures to sustain business operations during and after a significant disruption

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
60
Q

Categorize

A

The second step of the NIST RMF that is used to develop risk management processes and tasks

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
61
Q

CentOS

A

An open-source distribution that is closely related to red hat

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
62
Q

Central processing unit (CPU)

A

A computers, main processor, which is used to perform general computing tasks on a computer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
63
Q

Chain of custody

A

The process of documenting evidence, possession and control during an incident lifecycle

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
64
Q

Chronicle

A

A cloud-native tool, design to retain, analyze, and search data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
65
Q

Cipher

A

An algorithm that encrypts information

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
66
Q

Cloud-based firewalls

A

Software firewalls that are hosted by the cloud service provider

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
67
Q

Cloud computing

A

The practice of using remote servers, applications, and network services that are hosted on the Internet instead of on local physical devices

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
68
Q

Cloud Network

A

A collection of servers or computers that stores resources, and data in remote data centers that can be access via the Internet

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
69
Q

Command

A

And instruction telling the computer to do something

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
70
Q

Command and control (C2)

A

The techniques used by malicious actors to maintain communications with compromised systems

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
71
Q

Command-line interface (CLI)

A

A text-based user interface that uses commands to interact with the computer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
72
Q

Comment

A

A note programmers make about the intention behind their code

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
73
Q

Common event format (CEF)

A

A log format that uses key-value pairs to instruct data and identify fields and their corresponding values

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
74
Q

Common vulnerabilities and exposures (CVE) list

A

An openly accessible dictionary of known vulnerabilities and exposures

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
75
Q

Common vulnerability scoring system (CVSS)

A

A measurement system that scores the severity of a vulnerability

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
76
Q

Compliance

A

The process of adhering to internal standards and external regulations

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
77
Q

Computer security incident response teams (CSIRT)

A

A specialized group of security professionals that are trained in incident management and response

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
78
Q

Computer virus

A

Malicious code written to interfere with computer operations, and cause damage to data and software

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
79
Q

Conditional statement

A

A statement that evaluates code to determine if it needs a specified set of conditions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
80
Q

Confidentiality

A

The idea that only authorized users can access specific assets or data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
81
Q

Confidentiality, integrity, availability (CIA) Triad

A

A model that helps inform how organizations consider risk when setting up systems and security policies

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
82
Q

Configuration file

A

A file used to configure the settings of an application

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
83
Q

Containment

A

The act of limiting and preventing additional damage caused by an incident

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
84
Q

Controlled zone

A

A subnet that protects the internal network from the uncontrolled zone

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
85
Q

Cross-site scripting (XSS)

A

An injection attack that inserts code into a vulnerable website or web application

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
86
Q

Crowdsourcing

A

The practice of gathering, information, music, public input, and collaboration

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
87
Q

Cryptographic attack

A

An attack that affects secure forms of communication between a center and intended recipient

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
88
Q

Cryptographic key

A

A mechanism that decrypts ciphertext

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
89
Q

Cryptography

A

A process of transforming information into a form that unintended readers can’t understand

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
90
Q

Cryptojacking

A

A form of malware that installs software to illegally mine crypto currencies

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
91
Q

CVE numbering authority (CNA)

A

An organization, that volunteers to analyze and distribute information on eligible CVEs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
92
Q

Data

A

Information that is translated, processed, or stored by a computer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
93
Q

Data at rest

A

Data not currently being accessed

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
94
Q

Data custodian

A

Anyone or anything that’s responsible for the safe handling, transport, and storage of information

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
95
Q

Data exfiltration

A

Unauthorized transmission of data from a system

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
96
Q

Data in transit

A

Data traveling from one point to another

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
97
Q

Data in use

A

Data being accessed by one or more users

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
98
Q

Data owner

A

The person who decides who can access, edit, use, or destroy their information

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
99
Q

Data packet

A

A basic unit of information that travels from one device to another within a Network

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
100
Q

Data point

A

A specific piece of information

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
101
Q

Data type

A

A category for a particular type of data item

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
102
Q

Database

A

An organized collection of information or data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
103
Q

Date and time data

A

Data, representing a date and/or time

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
104
Q

Debugger

A

A software tool that helps to locate the source of an error and assess it causes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
105
Q

Debugging

A

A practice of identifying and fixing errors in code

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
106
Q

Defense in depth

A

A layered approach to vulnerability management that reduces risk

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
107
Q

Denial of service (DOS) attack

A

An attack that targets in network or server, and floods it with network traffic

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
108
Q

Detect

A

A NIST core function related to identifying potential security incidents and improving monitoring capabilities to increase the speed and efficiency of detection

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
109
Q

Detection

A

The prompt discovery of security events

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
110
Q

Dictionary data

A

Data that consists of one or more key-value pairs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
111
Q

Digital certificate

A

A file that verifies the identity of a public key holder

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
112
Q

Digital forensics

A

The practice of collecting and analyzing data to determine what has happened after an attack

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
113
Q

Directory

A

A file that organizes where other files are stored

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
114
Q

Distributed denial of service (DDOS) attack

A

A type of denial of service attack that uses multiple devices or servers to flood the target network with unwanted traffic

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
115
Q

Distributions

A

The different versions of Linux

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
116
Q

Documentation

A

Any form of recorded content that is used for specific purpose

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
117
Q

DOM-based XSS attack

A

An instant when malicious script exists in the webpage a browser loads

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
118
Q

Domain name system (DNS)

A

A networking protocol that translates Internet domain names into IP addresses

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
119
Q

Elevator pitch

A

A brief summary of a persons experience, skills, and background

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
120
Q

Encapsulation

A

A process performed by a VPN service that protects your data by wrapping sensitive data in other data packets

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
121
Q

Encryption

A

The process of converting data from a readable format to an encoded format

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
122
Q

Endpoint

A

Any device connected on a Network

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
123
Q

Endpoint detection and response (EDR)

A

An application that monitors an endpoint for malicious activity

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
124
Q

Eradication

A

The complete removal of the incident elements from all affected systems

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
125
Q

Escalation policy

A

A set of actions that outline who should be notified when an incident alert, occurs and how that incident should be handled

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
126
Q

Event

A

An observable occurrence on a network, system or device

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
127
Q

Exception

A

An error that involves code that cannot be executed even though it is syntactically correct

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
128
Q

Exclusive operator

A

An operator that does not include the value of comparison

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
129
Q

Exploit

A

A way of taking advantage of a vulnerability

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
130
Q

Exposure

A

A mistake that can be exploited by a threat

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
131
Q

External threat

A

Anything outside the organization that has the potential to harm organizational assets

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
132
Q

False negative

A

A state where the presence of a threat is not detected

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
133
Q

False positive

A

An alert that incorrectly detect the presence of a threat

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
134
Q

File path

A

The location of a file or directory

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
135
Q

Fileless malware

A

Malware that does not need to be installed by the user because it uses legitimate programs that are already installed to infect a computer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
136
Q

Filesystem hierarchy standard (FHS)

A

The component of the Linux OS that organizes data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
137
Q

Filtering

A

Selecting dated that match a certain condition

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
138
Q

Final report

A

Documentation that provides a comprehensive review of an incident

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
139
Q

Firewall

A

A network security device that monitors traffic to or from a Network

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
140
Q

Float data

A

Data consisting of a number with a decimal point

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
141
Q

Foreign key

A

A column in a table that is a primary key in another table

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
142
Q

Forward proxy server

A

A server that regulates and restricts a persons access to the Internet

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
143
Q

Function

A

A section of code that can be reused in a program

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
144
Q

Graphical user interface (GUI)

A

A user interface that uses icons on the screen to manage different tasks on the computer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
145
Q

Global variable

A

A Variable that is available through the entire program

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
146
Q

Hacker

A

Any person or group who uses computers to gain unauthorized access to data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
147
Q

Hacktivist

A

A person who uses hacking to achieve a political goal

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
148
Q

Hard drive

A

A hardware component used for long-term memory

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
149
Q

Hardware

A

The physical components of a computer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
150
Q

Hash collision

A

An instant when different inputs produce the same hash value

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
151
Q

Hash function

A

An algorithm that produces a code that can’t be decrypted

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
152
Q

Hash table

A

A data structure that used to store and reference hash values

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
153
Q

Health insurance portability and accountability act (HIPAA)

A

A US federal law established to protect patients health information

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
154
Q

Honeypot

A

A system or resource created as a decoy vulnerable to attacks with the purpose of attracting potential intruders

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
155
Q

Host-based intrusion detection system (HIDS)

A

An application that monitors the activity of the host on which it’s installed

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
156
Q

Hub

A

A network device that broadcast information to every device on the network

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
157
Q

Hypertext transfer protocol (HTTP)

A

An application layer protocol that provides a method of communication between clients and website servers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
158
Q

Hypertext transfer protocol secure (HTTPS)

A

A network protocol that provides a secure method of communication between clients and website servers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
159
Q

Identify

A

A NIST core function related to management of cyber security risk and it’s affect on an organizations people and assets

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
160
Q

Identity and access management (IAM)

A

A collection of processes and technologies that helps organizations manage digital identities of their environment

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
161
Q

IEEE 802.11 (WiFi)

A

Set of standards that define communication for wireless LANs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
162
Q

Immutable

A

An object that cannot be changed after it is created and assigned a value

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
163
Q

Implement

A

The fourth step of the NIST RMF that means to implement security and privacy plans for an organization

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
164
Q

Improper usage

A

An incident type that occurs when an employee of an organization violates the organizations acceptable use policies

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
165
Q

Incident

A

An occurrence that actually or imminently jeopardizes, without lawful authority, the confidentiality, integrity or availability of information or an information system; or constitutes a violation of imminent threat of violation of law, security policies, security procedures, or acceptable use policies

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
166
Q

Incident escalation

A

The process of identifying a potential security incident, triaging it, and handing it off to a more experienced team member

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
167
Q

Incident handler’s journal

A

A form of documentation used in incident response

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
168
Q

Incident response

A

An organizations quick attempt to identify an attack, contain the damage, and correct the effects of a security breach

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
169
Q

Incident response plan

A

A document that outlines the procedures to take in each step of incident response

170
Q

Inclusive operator

A

An operator that includes the value of comparison

171
Q

Indentation

A

Space added, at the beginning of a line of code

172
Q

Index

A

A number assigned to every element in a sequence that indicates its position

173
Q

Indicators of attack (IoA)

A

A series of observed events that indicate a real-time incident

174
Q

Indicators of compromise (IOC)

A

Observable evidence that suggest signs of a potential security incident

175
Q

Information privacy

A

The protection of unauthorized access and distribution of data

176
Q

Information security (InfoSec)

A

The practice of keeping data in all states away from unauthorized users

177
Q

Injection attack

A

Malicious code, inserted into a vulnerable application

178
Q

Input sanitization

A

Programming that validates inputs from users and other programs

179
Q

Integer data

A

Data consisting of a number that does not include a decimal point

180
Q

Integrated development environment (IDE)

A

A software application for riding code that provides editing assistance and error correction tools

181
Q

Integrity

A

The idea that the data is correct, authentic and reliable

182
Q

Internal hardware

A

The components required to run the computer

183
Q

Internet control message protocol (ICMP)

A

An Internet protocol used by devices to tell each other about data transmission errors across the network

184
Q

Internet control message protocol flood (ICMP flood)

A

A type of DOS attack performed by an attacker repeatedly sending ICMP packets to a Netwerk server

185
Q

Internet protocol (IP)

A

A set of standards used for routing and addressing data packets as a travel between devices on a network

186
Q

Internet protocol (IP) address

A

Are unique string of characters that identifies the location of a device on the Internet

187
Q

Interpreter

A

A computer program that translates python code into runable instructions, line by line

188
Q

Intrusion detection system (IDS)

A

An application that monitor system activity and alerts on a possible intrusion

189
Q

Intrusion prevention system (IPS)

A

An application that monitors system activity for intrusive activity and takes action to stop the activity

190
Q

IP spoofing

A

But network attack performed when an attacker changes, the source IP of a data packet to impersonate an authorized system, and gain access to a Network

191
Q

Iterative statement

A

Code that repeatedly executes a set of instructions.

192
Q

Kali Linux

A

An open source distribution of Linux that is widely used in the security industry

193
Q

Kernel

A

The component of the Linux OS that manages processes in memory

194
Q

Key-value pair

A

A set of data that represents two linked items: a key, and it’s corresponding value

195
Q

Legacy operating system

A

An operating system that is outdated, but still being used

196
Q

Lessons learned meeting

A

A meeting that includes all involved parties after a major incident

197
Q

Library

A

A collection of models that provide code users can access in their programs

198
Q

Linux

A

An open source operating system

199
Q

List concatenation

A

The concept of combining two lists into one by placing the elements of the second list, directly after the elements of the first list

200
Q

List data

A

Data structure that consists of a collection of data in sequential form

201
Q

Local area network (LAN)

A

But Netwerk that spans small areas like an office building, a school, or a home

202
Q

Local variable

A

A variable assigned within a function

203
Q

Log

A

A Record of events that occur within an organization’s system

204
Q

Log analysis

A

The process of examining logs to identify events of interest

205
Q

Log management

A

The process of collecting storing analyzing and disposing of log data

206
Q

Logging

A

The recording of events occurring on a computer system in networks

207
Q

Logic error

A

An error that results when the logic used in code produces unintended results

208
Q

Loop condition

A

The part of a loop that determines when the loop terminate

209
Q

Loop variable

A

A variable that is used to control the iterations of a loop

210
Q

Malware

A

Software designed to harm devices or networks

211
Q

Malware infection

A

An incident type that occurs when malicious software designed to disrupt a system infiltrates an organizations computers, or Network

212
Q

Media access control (MAC) address

A

Are unique alphanumeric identifier that is assigned to each physical device on a Network

213
Q

Method

A

A function that belongs to a specific data type

214
Q

Metrics

A

Key technical attributes such as response time, availability, and failure rate which are used to assess the performance of a software application

215
Q

MITRE

A

A collection of nonprofit research and development centers

216
Q

Modem

A

A device that connects your router to the Internet and brings Internet access to the LAN

217
Q

Module

A

Call file that contains additional functions variable, classes, and any kind of runable code

218
Q

Monitor

A

The seventh step of the NIST RMF that means be aware of how systems are operating

219
Q

Multi-factor authentication (MFA)

A

A security measure that requires a user to verify their identity in two or more ways to access a system or Network

220
Q

Nano

A

A command line file editor that is available by default in many Linux distributions

221
Q

National Institute of standards and technology (NIST) cybersecurity framework (CSF)

A

A voluntary framework that consists of standards, guidelines, and best practices to manage cyber security risk

222
Q

National Institute of standard and technology (NIST) incident response lifecycle

A

A framework for incident response consisting of four phases: preparation; detection and analysis; containment, eradication and recovery, and post incident activity

223
Q

Network

A

A Group of connected devices

224
Q

Network-based intrusion detection system (NIDS)

A

An application that collects and monitors Network traffic and network data

225
Q

Network data

A

The data that’s transmitted between devices on a Network

226
Q

Network interface card (NIC)

A

Hardware that connects computers to a Network

227
Q

Network log analysis

A

The process of examining network logs to identify events of interest

228
Q

Network protocol analyzer (packet sniffer)

A

A tool design to capture an analyze data traffic within a network

229
Q

Network protocols

A

I set of rules used by two or more devices on a network to describe the order of delivery and the structure of data

230
Q

Network segmentation

A

A security technique that divides the network into segments

231
Q

Network traffic

A

The amount of data that moves across a network

232
Q

National Institute of standards and technology (NIST) special publication (SP) 800-53

A

A unified framework for protecting the security of information systems within the US federal government

233
Q

Non-repudiation

A

The concept that the authenticity of information can’t be denied

234
Q

Notebook

A

An online interface for writing, storing and running code

235
Q

Numeric data

A

Data consisting of numbers

236
Q

OAuth

A

An open-standard authorization protocol that shares designated access between applications

237
Q

Object

A

A data type that stores data in a comma-separated list of key-value pairs

238
Q

On-path attack

A

An attack wear a malicious actor places themselves in the middle of an authorized connection and intercepts, or alters the data in transit

239
Q

Open systems interconnection (OSI) model

A

A standardize concept that describes the seven layers computers used to communicate and send data over in Network

240
Q

Open Web application security project (OWASP)

A

A nonprofit organization focused on improving software security

241
Q

Operating system (OS)

A

The interface between computer hardware and the user

242
Q

Operator

A

A symbol or key word that represents an operation

243
Q

Open-source intelligence (OSINT)

A

The collection and analysis of information from publicly available sources to generate usable intelligence

244
Q

Options

A

Input that modifies the behavior of a command

245
Q

Order of volatility

A

A sequence outlining the order of data that must be preserved from first to last

246
Q

OWASP top 10

A

A globally recognize standard awareness document that list the top 10 most critical security risks to web applications

247
Q

Package

A

Piece of software that can be combined with other packages to form an application

248
Q

Package manager

A

A tool that helps users install manage and remove packages or applications

249
Q

Packet capture (P-cap)

A

A file containing data packets intercepted from an interface or Network

250
Q

Packet sniffing

A

The practice of capturing and inspecting data packets across a network

251
Q

Parameter (python)

A

An object that is included in a function definition for use in that function

252
Q

Parrot

A

Open source distribution that is commonly used for security

253
Q

Parsing

A

The process of converting data into a more readable format

254
Q

Passive packet sniffing

A

A type of attack, where a malicious actor connects to a network hub, and looks at all traffic on the Netwerk

255
Q

Password attack

A

An attempt to access password, secure devices, systems, networks or data

256
Q

Patch update

A

A software And operating system update that address as security vulnerabilities within a program or product

257
Q

Payment card industry data security standards (PCI DSS)

A

Any card holder data, that an organization accepts, transmit, or stores

258
Q

Penetration test (pen test)

A

A simulated attack that helps identify vulnerabilities in systems, networks, websites, applications, and processes

259
Q

PEP 8 style guide

A

A resource that provides stylistic guidelines for programmers working in python

260
Q

Peripheral devices

A

Hardware components that are attached and controlled by a computer system

261
Q

Phishing

A

The use of digital communications to trick people into revealing sensitive data or deploying malicious software

262
Q

Phishing kit

A

A collection of software tools needed to launch phishing campaigns

263
Q

Physical attack

A

A security incident that affects not only digital but also physical environments where the incident is deployed

264
Q

Physical social engineering

A

Attack in which a thread actor impersonates an employee, customer or vendor to obtain on authorized access to a physical location

265
Q

Ping of death

A

A type of DOS attack when a hacker pings a system by sending it an oversized ICMP packet that is bigger than 64KB

266
Q

Playbook

A

A manual that provides details about an operational action

267
Q

Policy

A

Set of rules that reduce risk and protect information

268
Q

Port

A

A software-based location that organizes the sending, and receiving of data between devices on a Network

269
Q

Port filtering

A

A firewall function that blocks or allows certain port numbers to limit unwanted communication

270
Q

Post-incident activity

A

The process of reviewing an incident to identify areas for improvement during incident handling

271
Q

Potentially unwanted application (PUA)

A

A type of unwanted software that is bundled in with legitimate programs which might display ads, cause device slow down, or install other software

272
Q

Prepare

A

The first step of the NIST RMF related to activities that are necessary to manage security and privacy risks before a breach occurs

273
Q

Prepared statement

A

A coding technique that executes SQL statements before passing them on to a database

274
Q

Primary key

A

A column where every row has a unique entry

275
Q

Principle of least privilege

A

The concept of granting, only the minimal access and authorization required to complete task or function

276
Q

Privacy protection

A

The act of safeguarding personal information from unauthorized use

277
Q

Privilege

A

Any authority for making changes in a computer system

278
Q

Procedures

A

Step-by-step instructions to perform a specific security task

279
Q

Process of attack simulation and threat analysis (PASTA)

A

A popular threat modeling framework that’s used across many industries

280
Q

Programming

A

A process that can be used to create a specific set of instructions for a computer to execute tasks

281
Q

Protect

A

A NIST core function used to protect an organization through the implementation of policies, procedures, training, and tools that help mitigate cybersecurity threats

282
Q

Protected health information (PHI)

A

Information that relates to the past, present, or future, physical or mental health or condition of an individual

283
Q

Protecting and preserving evidence

A

The process of properly, working with fragile and volatile digital evidence

284
Q

Proxy server

A

A server that fulfills the request of its clients by forwarding them to other servers

285
Q

Public key infrastructure (PKI)

A

An encryption framework that secures the exchange of online information

286
Q

Python standard library

A

An extensive collection of python code that often comes packaged with python

287
Q

Query

A

A request for data from a database table or a combination of tables

288
Q

Quid pro quo

A

A type of baiting used to trick someone into believing that they’ll be rewarded in return for sharing, access, information or money

289
Q

Rainbow table

A

A file of pregenerated hash values and the associated plaintext

290
Q

Random access memory (RAM)

A

A hardware component used for short-term memory

291
Q

Ransomware

A

A malicious attack where threat actors encrypt an organizations data and demand payment to restore access

292
Q

Rapport

A

A friendly relationship in which the people involved understand each other’s ideas, and communicate well with each other

293
Q

Recover

A

A NIST core function related to returning affected systems back to normal operation

294
Q

Recovery

A

The process of returning affected systems back to normal operations

295
Q

Red hat

A

A subscription-based distribution of a Linux built for enterprise use

296
Q

Reflected XSS attack

A

In instance when malicious script is sent to a server and activated during the servers response

297
Q

Regular expression (regex)

A

A sequence of characters that forms a pattern

298
Q

Regulations

A

Rules set by a government or other authority to control the way something is done

299
Q

Relational database

A

A structure database containing tables that are related to each other

300
Q

Relative file path

A

A file path that starts from the users current directory

301
Q

Replay attack

A

A network detect performed when a malicious actor intercepts of data packet in transit and delays it or repeats it at another time

302
Q

Resiliency

A

The ability to prepare for, respond to, and recover from disruptions

303
Q

Respond

A

A NIST core function related to making sure that the proper procedures are used to contain, neutralize, and analyze security incidents, and implement improvements to the security process.

304
Q

Critical infrastructure

A

System and assets, whether physical or virtual, so vital to the United States that the incapacity or destruction of such systems and assets would have a debilitating impact on security, national economic security, national public health or safety, or any combination of those matters.

305
Q

Security lifecycle

A

A constantly evolving set of policies in standards that define how organization manages risks, follows established guidelines, and meets regulatory compliance, or laws

306
Q

Return statement

A

A python statement that execute inside a function and send information back to the Function call

307
Q

Reverse proxy server

A

A server that regulates in restricts the Internet access to an internal server

308
Q

Risk

A

Anything that can impact confidentiality, integrity, or availability of an asset

309
Q

Risk mitigation

A

The process of having the right procedures and rules in place to quickly reduce the impact of a risk like a breach

310
Q

Root directory

A

The highest level directory in Lenox

311
Q

Root user (or superuser)

A

A user with elevated privileges to modify the system

312
Q

Rootkit

A

Malware that provides remote, administrative access to a computer

313
Q

Router

A

A network device that connects multiple networks together

314
Q

Salting

A

An additional safeguard that used to strengthen Hash functions

315
Q

Scareware

A

Malware that employees tactics to frighten users into infecting their device

316
Q

Search processing language (SPL)

A

Splunks weary language

317
Q

Secure file transfer protocol (SFTP)

A

A secure protocol used to transfer files from one device to another over and network

318
Q

Secure shell (SSH)

A

A security protocol used to create a shell with a remote system

319
Q

Security architecture

A

A type of security design composed of multiple components, such as tools and processes, that are used to protect an organization from risks and external threats.

320
Q

Security audit

A

A review of an organization security controls, policies, and procedures against a set of expectations

321
Q

Security breach

A

Unauthorized access to systems, applications, networks, or devices

322
Q

Security controls

A

Safeguards designed to reduce specific security risks

323
Q

Security ethics

A

Guidelines for making appropriate decisions as a security professional

324
Q

Security zone

A

A segment of a company’s network that protects the internal network from the Internet

325
Q

Security frameworks

A

Guidelines used for building, plans to help mitigate risk and threats to data and privacy

326
Q

Security governance

A

Practices that help support, define and direct security efforts of an organization

327
Q

Security hardening

A

The process of strengthening assistant, to reduce its vulnerabilities and a tax surface

328
Q

Security information and event management (SIEM)

A

An application that collects and analyzes log data to monitor critical activities in an organization

329
Q

Security mindset

A

The ability to evaluate risk and constantly seek out and identify the potential or actual breach of a system, application or data

330
Q

Security operations Center (SOC)

A

An organizational unit dedicated to monitoring network systems and devices for security, threats or attacks

331
Q

Security orchestration, automation, and response (SOAR)

A

A collection of applications, tools, and workflows that use automation to respond to security events

332
Q

Security posture

A

And organizations ability to manage its defense of critical assets and data, and react to change

333
Q

Select

A

The third step of the NIST RMF, that means to choose customize and capture documentation of the controls that protect an organization

334
Q

Separation of duties

A

The principle that user should not be given levels of authorization that would allow them to miss use a system

335
Q

Session

A

A sequence of Network HTTP basic auth request and response associated with the same user

336
Q

Session cookie

A

A token that websites used to validate a session and determine how long that session should last

337
Q

Session hijacking

A

An event, when a tackers obtain a legitimate user session ID

338
Q

Session ID

A

Are unique token that identifies a user and their device while accessing a system

339
Q

Set data

A

Data that consists of an unordered collection of unique values

340
Q

Shared responsibility

A

The idea that all individuals within an organization, take an active role in lowering risk and maintaining both physical and virtual security

341
Q

Shell

A

The command-line interpreter

342
Q

Signature

A

A pattern that is associated with malicious activity

343
Q

Signature analysis

A

A detection method used to find events of interest

344
Q

Simple Netwerk management protocol (SNMP)

A

Network protocol used for monitoring and managing devices on a network

345
Q

Single sign-on (SSO)

A

A technology that combined several different logins into one

346
Q

Smishing

A

Do use of a text message to trick users to obtain sensitive information or to impersonate a known source

347
Q

Smurf attack

A

A network attack performed when an attack or sniffs and authorized users IP address and floods it with ICMP packets

348
Q

Social engineering

A

I’m in ambulation technique that exploits human error to gain private information, access, or valuables

349
Q

Social media phishing

A

A type of attack where a threat actor collects detailed information about their target on social media sites before initiating the attack

350
Q

Spear phishing

A

A malicious email attack targeting a specific user or group of users, appearing to originate from a trusted source

351
Q

Speed

A

The rate at which data packets are received or downloaded

352
Q

Splunk cloud

A

A cloud hosted tool used to collect, search and monitor log data

353
Q

Splunk enterprise

A

A self hosted tool used to retain, analyze, and search an organizations log data to provide security information and alerts in real time

354
Q

Spyware

A

Malware that’s used to gather and sell information without consent

355
Q

SQL (structured query language)

A

A programming language used to create, interact with, and request information from a database

356
Q

SQL injection

A

An attack that execute unexpected queries on a database

357
Q

Stakeholder

A

An individual or group that has an interest in any decision or activity of an organization

358
Q

Standard error

A

An error message returned by the OS through the shell

359
Q

Standard input

A

Information received by the OS via the command line

360
Q

Standard output

A

Information returned by the OS through the shell

361
Q

Standards

A

References that inform how to set policies

362
Q

STAR method

A

A technique used to answer behavioral and situational interview questions

363
Q

Stateful

A

A class of firewall that keeps track of information passing through it, and proactively filters out threats

364
Q

Stateless

A

A class of firewall that operates based on predefined rules, and that does not keep track of information from data packets

365
Q

Stored XSS attack

A

An instance, when malicious script is injected directly on the server

366
Q

String concatenation

A

The process of joining two strings together

367
Q

String data

A

Data consisting of an ordered sequence of characters

368
Q

Style guide

A

Emmanuel that informs the writing, formatting and design of documents

369
Q

Subnetting

A

The subdivision of a network into logical groups called subnets

370
Q

Substring

A

A continuous sequence of characters within a string

371
Q

Supply-chain attack

A

An attack that targets systems, applications, hardware, and/or software to locate a vulnerability, where malware can be deployed

372
Q

Suricata

A

An open-source intrusion detection system, intrusion prevention system, and network analysis tool

373
Q

Switch

A

A device that makes connection between specific devices on a network by sending, and receiving data between them

374
Q

Symmetric encryption

A

The use of a single secret key to exchange information

375
Q

Synchronize (SYN) flood attack

A

A type of DOS attack that simulates a TCP/IP connection and floods a server with SYN packets

376
Q

Syntax

A

The rules that determine what is correctly structured in a computing language

377
Q

Syntax error

A

An error that involves invalid usage of a programming language

378
Q

Tailgating

A

A social engineering tactic in which unauthorized people follow an authorized person into a restricted area

379
Q

TCP/IP model

A

A framework used to visualize how data is organized and transmitted across a network

380
Q

tcpdump

A

A command line network protocol analyzer

381
Q

Telemetry

A

The collection and transmission of data for analysis

382
Q

Threat hunting

A

The proactive search for threats on a network

383
Q

Threat intelligence

A

Evidence-based threat information that provides context about existing or emerging threats

384
Q

Threat modeling

A

The process of identifying assets, their vulnerabilities, and how each is exposed to threats

385
Q

Transmission control protocol (TCP)

A

An Internet communication protocol that allows two devices to form a connection and stream data

386
Q

Triage

A

The prioritizing of incidents according to their level of importance or urgency

387
Q

Trojan horse

A

Malware that looks like a legitimate file or program

388
Q

True negative

A

A state where there is no detection of malicious activity

389
Q

True positive

A

An alert that correctly detects the presence of an attack

390
Q

Tuple data

A

Data that consists of a collection of data that cannot be changed

391
Q

Type error

A

An error that results from using the wrong data type

392
Q

Ubuntu

A

An open-source, user-friendly distribution that is widely used in security and other industries

393
Q

Unauthorized access

A

An incident type that occurs when an individual gain digital or physical access to a system or application without permission

394
Q

Uncontrolled zone

A

The portion of the network outside the organization

395
Q

Unified extensible firmware interface (UEFI)

A

A microchip that contains load instructions for the computer and replaces BIOS on more modern systems

396
Q

USB baiting

A

An attack in which a thread actor strategically leaves a mal wear USB stick for an employee to find and install to unknowingly infect a network

397
Q

User

A

The person interacting with a computer

398
Q

User datagram protocol (UDP)

A

A connectionless protocol that does not establish a connection between devices before transmissions

399
Q

User interface

A

A program that allows the user to control the functions of the operating system

400
Q

User provisioning

A

The process of creating and maintaining a users digital identity

401
Q

User-defined function

A

The function that programmers design for their specific needs

402
Q

Variable

A

A container that stores data

403
Q

Virtual private network (VPN)

A

The network security service that changes, your public IP address and masks your virtual location so that you can keep your data private when you are using a public network like the Internet

404
Q

Virus

A

Refers to computer virus

405
Q

Virustotal

A

A service that allows anyone to analyze suspicious files, domains, URLs and IP addresses for malicious content

406
Q

Vishing

A

The exploitation of electronic voice communication to obtain sensitive information or to impersonate a known source

407
Q

Vulnerability

A

A weakness that can be exploited by a threat

408
Q

Vulnerability assessment

A

The internal review process of an organization security teams

409
Q

Vulnerability management

A

The process of finding and patching vulnerabilities

410
Q

Vulnerability scanner

A

Software that automatically compares existing common vulnerabilities and exposures, or CVEs against the technologies on the net work

411
Q

Watering hole attack

A

A type of attack when a threat actor compromises a website frequently visited by a specific group of users

412
Q

Web-based exploits

A

Malicious code or behavior that used to take advantage of coding flaws in a web application

413
Q

Whaling

A

A category of spearphishing attempts that are aimed at high-ranking executives in an organization

414
Q

Wide area network (WAN)

A

I know work that spans a large geographic area, like a city, state or country

415
Q

Wi-Fi protected access (WPA)

A

A wireless security protocol for devices to connect to the Internet

416
Q

Wild card

A

A character that’s used to represent one or more characters

417
Q

Wiresshark

A

An open source network protocol analyzer

418
Q

World-writable file

A

A file that can be altered by anyone in the world

419
Q

Worm

A

Malware that can duplicate and spread itself across systems on its own

420
Q

YARA-L

A

A computer language used to create rules for searching through ingested log data

421
Q

Zero-day

A

An exploit that was previously unknown

Cyber Security (2 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions