intro

Question 1

the process of gathering information about an organization, including: system hardware information; network configurations; and individual user information

Answer 1

Reconnaissance

Question 2

when a system’s defenses are penetrated; and unauthorized access is gained.

Answer 2

Breach

Question 3

when unknown additional rights are configured to a users account

Answer 3

escalate privileges

Question 4

This process of preparing a computer to perform additional tasks during an attack, such as installing software designed to attach other systems.

Answer 4

Staging

Question 5

taking advantage of known vulnerabilities in software and systems

Answer 5

Exploit

Question 6

the implementation of multiple security measures to protect the same asset

Answer 6

Layering

Question 7

users or groups are given only the access they need to do their jobs.

Answer 7

principle of least privilege

Question 8

the constant changing of personal habits and passwords to prevent anticipated events and exploration

Answer 8

Randomness

Question 9

a relationships that flows among multiple domains

Answer 9

transitive trust

Question 10

a relationship explicit between domains

Answer 10

non-transitive trust