P-GLOSSARY

Question 1

Packet

Answer 1

Data unit that is routed from source to destination in a packet-switched network. A packet contains both routing information and data.
Transmission Control Protocol/Internet Protocol (TCP/IP) is such a packet-switched network.

Question 2

Packet filtering

Answer 2

Controlling access to a network by analyzing the attributes of the incoming and outgoing packets, and either letting them pass or denying them based on a list of rules

Question 3

Packet sniffer

Answer 3

Software that observes and records network traffic

Question 4

Packet switched network

Answer 4

Individual packets follow their own paths through the network from one endpoint to another and reassemble at the destination.

Question 5

Partitions

Answer 5

Major divisions of the total physical hard disk space

Question 6

Passive response

Answer 6

A response option in intrusion detection in which the system simply reports and records the problem detected, relying on the user to take subsequent action

Question 7

Password cracker

Answer 7

A tool that tests the strength of user passwords searching for passwords that are easy to guess. It repeatedly tries words from specially crafted
dictionaries and often also generates thousands (and in some cases, even millions) of permutations of characters, numbers and symbols.

Question 8

Penetration testing

Answer 8

A live test of the effectiveness of security defenses through mimicking the actions of real-life attackers

Question 9

Personally Identifiable Information (PII)

Answer 9

Information that can be used alone or with other sources to uniquely identify, contact or locate a single individual

Question 10

Pharming

Answer 10

This is a more sophisticated form of a man-in-the-middle (MITM) attack.
A user’s session is redirected to a masquerading web site. This can be achieved by corrupting a domain name system (DNS) server on the
Internet and pointing a URL to the masquerading web site’s IP address.

Question 11

Phishing

Answer 11

This is a type of electronic mail (email) attack that attempts to convince a user that the originator is genuine, but with the intention of obtaining
information for use in social engineering. Phishing attacks may take the form of masquerading as a lottery organization advising the recipient or the user’s bank of a large win; in either case, the intent is to obtain account and personal identification number (PIN) details. Alternative attacks may seek to obtain apparently innocuous business information, which may be used in another form of active attack.

Question 12

Platform as a Service (PaaS)

Answer 12

Offers the capability to deploy onto the cloud infrastructure custome rcreated or -acquired applications that are created using programming
languages and tools supported by the provider

Question 13

Policy

Answer 13

Overall intention and direction as formally expressed by management

Question 14

Port

Answer 14

A hardware interface between a CPU and a peripheral device. Can also refer to a software (virtual) convention that allows remote services to connect to a host operating system in a structured manner.

Question 15

Privacy

Answer 15

Freedom from unauthorized intrusion or disclosure of information of an individual.

Question 16

Private key

Answer 16

A mathematical key (kept secret by the holder) used to create digital signatures and, depending on the algorithm, to decrypt messages or files encrypted (for confidentiality) with the corresponding public key

Question 17

Procedure

Answer 17

A document containing a detailed description of the steps necessary to perform specific operations in conformance with applicable standards
Procedures are defined as part of processes.

Question 18

Proxy server

Answer 18

A server that acts on behalf of a user. Typically proxies accept a connection from a user, make a decision as to whether or not the user or client IP address is permitted to use the proxy, perhaps perform additional
authentication, and then complete a connection to a remote destination on behalf of the user.

Question 19

Public key

Answer 19

In an asymmetric cryptographic scheme, the key that may be widely published to enable the operation of the scheme.