Lesson 1 - Fundamental Security Concepts

Question 1

CIA

Answer 1

Confidentiality, Integrity, Authorization

Question 2

NIST

Answer 2

National Institute of Standards and Technology
- Develops computer security standards used by US federal agencies and publishes cybersecurity best practice guides and research.

Question 3

CSF

Answer 3

Cybersecurity Framework
- Standards, best practices, and guidelines for effective security risk management. Some frameworks are general in nature, while others are specific to industry or technology types.

Question 4

IAM

Answer 4

Identity and Access Management
- A security process that provides identification, authentication, and authorization mechanisms for users, computers, and other entities to work with organizational assets like networks, operating systems, and applications.

Question 5

AAA

Answer 5

Authentication, Authorization and Accounting
- A security concept where a centralized platform verifies subject identification, ensures the subject is assigned relevant permissions, and then logs these actions to create an audit trail.

Question 6

ACL

Answer 6

Access Control List
- The collection of access control entries (ACEs) that determines which subjects (user accounts, host IP addresses, and so on) are allowed or denied access to the object and the privileges given (read-only, read/write, and so on).

Question 7

CIO

Answer 7

Chief Information Officer
- A company officer with the primary responsibility for management of information technology assets and procedures.

Question 8

CTO

Answer 8

Chief Technology Officer
- A company officer with the primary role of making effective use of new and emerging computing platforms and innovations.

Question 9

CSO

Answer 9

Chief Security Officer
- Typically the job title of the person with overall responsibility for information assurance and systems security.

Question 10

CISO

Answer 10

Chief Information Security Officer

Question 11

ISSO

Answer 11

Information Systems Security Officer
- Organizational role with technical responsibilities for implementation of security policies, frameworks, and controls.

Question 12

NICE

Answer 12

National Initiative for Cybersecurity Education

Question 13

SOC

Answer 13

Security Operations Center
- The location where security professionals monitor and protect critical information assets in an organization.

Question 14

DevOps

Answer 14

Development and Operations
- A combination of software development and systems operations, and refers to the practice of integrating one discipline with the other.

Question 15

CIRT

Answer 15

Computer Incident Response Team
- Team with responsibility for incident response. The CSIRT must have expertise across a number of business domains (IT, HR, legal, and marketing, for instance).