Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

Cyber Security > Knowledge Asset Security (KAS) > Flashcards

Knowledge Asset Security (KAS) Flashcards

1
Q

800-122

A

NIST Special Publication – defines PII as any information that can be used to trace a person’s identity such as SSN, name, DOB, place of birth, mother’s maiden name

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

800-137

A

build/implement info security continuous monitoring program: define, establish, implement, analyze and report

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

800-14

A

GAPP for securing information technology systems

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

800-145

A

cloud computing

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

800-18 NIST

A

How to develop security plans

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

800-27

A

Baseline for achieving security, five lifecycle planning phases (defined in 800-14), 33 IT security principles

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

800-88

A

NIST guidelines for sanitation and disposition, prevents data remanence

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Administrators

A

Assign permission to access and handle data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Auditor

A

examines security controls

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Baseline

A

Starting point that can be tailored to an organization for a minimum security standard. Common security configurations, Use Group Policies to check and enforce compliance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Buy high quality media

A

value of data exceeds cost of media; Sanitation is business normal, not destruction for costs reasons

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

CD

A

Compact Disc: a class of media on which data are recorded by optical means.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

CIS

A

Center for Internet Security; creates list of security controls for OS, mobile, server, and network devices

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Classifying Costs

A

costs are not a factor in classifying data but are in controls

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Clear

A

To use software or hardware products to overwrite storage space on the media with non- sensitive data. This process may include overwriting not only the logical storage location of a file(s) (e.g., file allocation table) but also may include all addressable locations. See comments on clear/purge convergence.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Clearing

A

z-Prepping media for reuse at same level. Removal of sensitive data from storage devices in such a way that the data may not be reconstructed using normal system functions or utilities. May be recoverable with special lab equipment. Data just overwritten.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

COPPA

A

California Online Privacy Protection Act, operators of commercial websites post a privacy policy if collecting personal information on CA residents

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Criteria

A

Value, age, useful life, personal association

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Curie Temperature

A

Critical point where a material’s intrinsic magnetic alignment changes direction.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Data

A

Pieces of information from which “understandable information” is derived

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Data at rest

A

Dar; inactive data that is physically stored, not RAM, biggest threat is a data breach, full disk encryption protects it (Microsoft Bitlocker and Microsoft EFS, which use AES, are apps)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Data Life

A

Creation, use, destruction (subservient to security policy)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Degauss

A

To reduce the magnetic flux to virtual zero by applying a reverse magnetizing field. Also called demagnetizing. Degaussing any current generation hard disk (including but not limited to IDE, EIDE, ATA, SCSI and Jaz) will render the drive permanently unusable since these drives store track location information on the hard drive in dedicated regions of the drive in between the data sectors.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Degaussing

A

AC erasure; alternating magnetic fields , DC erasure; unidirectional magnetic field or permanent magnet, can erase tapes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

Destruction

A

The result of actions taken to ensure that media cannot be reused as originally intended and that information is virtually impossible to recover or prohibitively expensive.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

Digital

A

The binary coding scheme generally used in computer technology to represent data as binary bits (1s and 0s).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

Disintegration

A

A physically destructive method of sanitizing media; the act of separating into component parts.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

Disposal

A

Disposal is the act of discarding media with no other sanitization considerations. This is most often done by paper recycling containing non-confidential information but may also include other media.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

DLP

A

Data Loss/Leakage Prevention, use labels to determine the appropriate control to apply to data. Won’t modify labels in real-time.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

DOD 8510.01

A

establishes DIACAP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

DVD

A

Digital Video Disc – a disc the same shape and size as a CD; but the DVD has a higher density and gives the option for data to be double-sided or double-layered.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

ECM

A

Enterprise Content Management; centrally managed and controlled

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

Electronic Media

A

General term that refers to media on which data are recorded via an electrically based process.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

Encrypt data

A

a good way to secure files sent through the internet

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

End to End

A

You can see ALL BUT PAYLOAD, normally done by users

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

End user

A

Uses information as their job
Follows instructions in policies and guidelines
Due care (prevents open view by e.g. Clean desk)
Use corporation resources for corporation use

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

Erasing

A

deletion of files or media, removes link to file, least effective

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

Erasure

A

Process intended to render magnetically stored information irretrievable by normal means.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

FIPS

A

Federal Information Processing Standards; official series of publications relating to standards and guidelines adopted under the FISMA, Federal Information Security Management Act of 2002.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

FIPS 199

A

Standards for categorizing information and information systems.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

FIPS 200

A

minimum security requirements for Federal information and information systems

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

Format

A

Pre-established layout for data.

43
Q

FTC

A

z-overseas compliance framework for organizations wishing to use personal data of EU citizens
Self-certify but Dpt. Of Transportation or FTC can enforce
Gramm/Leach/Bailey Act delaying application to financial markets

44
Q

FTP and Telnet are unencrypted!

A

SFTP and SSH provide encryption to protect data and credentials that are used to log in

45
Q

Hard Disk

A

A rigid magnetic disk fixed permanently within a drive unit and used for storing data.

46
Q

Incineration

A

A physically destructive method of sanitizing media; the act of burning completely to ashes.

47
Q

Information

A

Meaningful interpretation or expression of data.

48
Q

Information policy

A

classifications and defines level of access and method to store and transmit information

49
Q

Label

A

Metadata of subject (its classification) or object (its clearance) relating to the operational processes of mandatory access control systems .

50
Q

Label Data

A

to make sure data is identifiable by its classification level. Some label all media that contains data to prevent reuse of Public media for sensitive data.

51
Q

Link

A

z-is usually point to point EVERYTHING ENCRYPTED
“Black pipe, black oil, black ping pong balls” all data is encrypted, normally did by service providers

52
Q

Marking

A

act of identifying that material is classified but not revealing the classification; no label is visible.

53
Q

Media

A

Plural of medium.

54
Q

Media Sanitization

A

A general term referring to the actions taken to render data written on media unrecoverable by both ordinary and extraordinary means.

55
Q

Medium

A

Material on which data are or may be recorded, such as paper, punched cards, magnetic tape, magnetic disks, solid state devices, or optical discs.

56
Q

Melting

A

A physically destructive method of sanitizing media; to be changed from a solid to a liquid state generally by the application of heat.

57
Q

NIST

A

National Institute of Standards and Technology

58
Q

NIST SP 800 series

A

z-special publications address computer security in a variety of areas

59
Q

Non-disclosure Agreement

A

z-legal agreement that prevents employees from sharing proprietary information

60
Q

Optical Disks

A

A plastic disk that is “written” (encoded) and “read” using an optical laser device.

61
Q

Overwrite

A

Writing patterns of data on top of the data stored on a magnetic medium. NSA has researched that one overwrite is good enough to sanitize most drives. See comments on clear/purge convergence.

62
Q

Overwriting wiping shredding

A

z-overwrites with pattern, may miss

63
Q

PCI-DSS

A

Payment and Card Industry – Security Standards Council; credit cards, provides a set of security controls /standards

64
Q

Personnel Retention

A

Deals with the knowledge that employees gain while employed.

65
Q

Physical Destruction

A

A sanitization method for optical media, such as CDs.

66
Q

Pulverization

A

A physically destructive method of sanitizing media; the act of grinding to a powder or dust.

67
Q

Purge

A

Rendering sanitized data unrecoverable by laboratory attack methods. See comments on clear/purge convergence.

68
Q

Purging

A

More intense than clearing. Media can be reused in lower systems. Removal of sensitive data with the intent that the data cannot be reconstructed by any known technique.

69
Q

QA

A

assessment of quality based on standards external to the process and involves reviewing of the activities and quality control processes.

70
Q

QC

A

assessment of quality based on internal standards

71
Q

Read

A

Fundamental process in an information system that results only in the flow of information from an object to a subject.

72
Q

Record

A

To write data on a medium, such as a magnetic tape, magnetic disk, or optical disc.

73
Q

Record Retention

A

retaining and maintaining information for as long as it’s needed

74
Q

Record Retention Policies

A

how long data retained and maintained

75
Q

Recovery Procedures

A

Action necessary to store data files of an information system and computational capability after a system failure.

76
Q

Remanence

A

Residual information remaining on storage media after clearing.

77
Q

Removable Media

A

use strong encryption, like AES256, to ensure loss of media does not result in data breach

78
Q

Residue

A

Data left in storage after information processing operations are complete, but before degaussing or overwriting has taken place.

79
Q

Reuse

A

Downgrading equipment for reuse will probably be more expensive than buying new

80
Q

ROM

A

Read Only Memory. Generally a commercially available disc or solid state device on which the content was recorded during the manufacturing process.

81
Q

Sanitize

A

Process to remove information from media such that data recovery is not possible. It includes removing all classified labels, markings, and activity logs.

82
Q

Sanitizing

A

Series of processes that removes data, ensures data is unrecoverable by any means. Removing a computer from service and disposed of. All storage media removed or destroyed.

83
Q

Scoping

A

reviewing baseline security controls and selecting only those controls that apply to the IT system you’re trying to protect.

84
Q

Secure Erase

A

An overwrite technology using firmware based process to overwrite a hard drive. Is a drive command defined in the ANSI ATA and SCSI disk drive interface specifications, which runs inside drive hardware. It completes in about 1/8 the time of 5220 block erasure.

85
Q

Security Analyst

A

Strategic, develops policies and guidelines

86
Q

Security planning

A

involves security scope, providing security management responsibilities and testing security measures for effectiveness. Strategic 5 years Tactical shorter than strategic Operational day to day, short term

87
Q

Security policies

A

authenticates and defines technology used to control information access and distribution

88
Q

Senior Manager

A

ultimate responsibility

89
Q

Shred

A

A method of sanitizing media; the act of cutting or tearing into small particles.

90
Q

Standards

A

Specify use of specific technologies in a uniform way

91
Q

Storage

A

Retrievable retention of data. Electronic, electrostatic, or electrical hardware or other elements (media) into which data may be entered, and from which data may be retrieved.

92
Q

Supplementation

A

adding assessment procedures or assessment details to adequately meet the risk management needs of the organization.

93
Q

System Owners

A

Select security controls

94
Q

SYSTEM security policy

A

lists hardware / software to be used and steps to undertake to protect infrastructure

95
Q

Tailoring

A

modifying the list of security controls within a baseline so that they align with the mission of the organization.

96
Q

WORM

A

Write-Once Read Many.

97
Q

Zero fill

A

wipe a drive and fill with zeros

98
Q

exculpatory

A

evidence that is favorable to defendant, tends to exonerate

99
Q

inculpatory

A

evidence that shows guilt

100
Q

colocation cloud

A

Colocation cloud combines the benefits of colocation and cloud computing to provide a comprehensive solution that addresses the limitations of traditional data management approaches.

101
Q

blue team

A

defends from attacks

102
Q

red team

A

attacks

103
Q

white team

A

handles security incidents

Cyber Security (19 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions