Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

Cyber Security > SAE > Flashcards

SAE Flashcards

1
Q

the managerial approval to operate a system based upon knowledge of risk to operate

A

Accreditation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

A manually actuated device installed at a fixed location to transmit an alarm signal in response to an alarm condition.

A

Alarm Station

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

A device that signals a change of protection zone status in a security system.

A

Annunciator

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

high level design or model with a goal of consistency, integrity, and balance

A

Architecture

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Security policy model with simple security property and *-property. The simple security property is no process may read data at a higher level. This is also known as no read up (NRU). The *-property: no process may write data to a lower level. This is also known as no write down (NWD).

A

Bell-LaPadula

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Security policy model that deals with integrity alone and ignores confidentiality. First rule integrity - preventing unauthorized users from making modifications. Simple integrity - No read down. Star integrity - No write up. Service commands - Tranquility.

A

Biba

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

prolonged loss of commercial power

A

Blackout

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

vehicle stopping object

A

Bollard

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

The part of a lock which, when actuated, is projected (or “thrown”) from the lock into a retaining member, such as a strike plate, to prevent a door or window from moving or opening.

A

Bolt

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

a process consist of limits set on the memory addresses and resources it can access.

A

Bounds
The bounds state the area within which a process is confined or contained.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Created Chinese-Wall model to handle conflicts of interest. Law firm 1 works for Company A. Law firm 2 works for Company B. Law firm 1 and Law firm2 merges. Ensures paralegals on Law firm 1 only works on Company A and paralegals on Law firm 2 only works on Company B.

A

Brewer-Nash

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

reduction of voltage by the utility company for a prolonged period of time

A

Brownout

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

hitting a filed down key in a lock with a hammer to open without real key

A

Bumping

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

The property of two or more objects, which enables them to store electrical energy in an electric field between them. The basic measurement unit is the Farad.

A

Capacitance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

A type of access control system that uses a card with a coded area or strip, on or inside the card, to actuate a lock or other access control device.

A

Card Access

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

A card usually plastic, that contains encoded information to open a locking device.

A

Card Key

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

the core of a computer that calculates

A

Central Processing Unit

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

An organization or business established for the purpose of monitoring subscribers’ alarm systems from a centralized monitoring location rather than at the individual sites.

A

Central Station

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

the technical and risk assessment of a system within the context of the operating environment

A

Certification

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

complex instructions. Many operations per instruction. Less number of fetches

A

CICS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Integrity security model. Three integrity goals: Preventing unauthorized users from making modifications, Preventing authorized users from making improper modifications, maintaining internal and external consistency. Defines well formed transactions, Separation of duties, Access Triple - subject-application-object.

A

Clark and Wilson

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Official information that has been identified and marked as Top Secret, Secret, or Confidential in the interests of national security.~

A

Classified Information

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

A television system, hard-wired, used for proprietary purposes and not for public or general broadcast.

A

Closed Circuit Television

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

A keyless lock which requires the turning of a numbered dial to a preset sequence of numbers for the lock to open.

A

Combination Lock

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

the current internationally accepted set of standards and processes for information security products evaluation and assurance, which joins function and assurance requirements

A

Common Criteria

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

to restrict the actions of a program. Simply put, process confinement allows a process to read from and write to only certain memory locations and resources. This is also known as sandboxing.

A

Confinement

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

one entity with two competing allegiances

A

Conflict of interest

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

an unintended communication path

A

Covert Channel

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

dedicated fast memory located on the same board as the CPU

A

CPU Cache

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

An individual who is designated the responsibility for maintaining, safeguarding and accounting for classified information.

A

Custodian

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

a system-level memory protection feature that is built into the OS, it prevents code from being run from data pages such as the default heap, stacks, and memory pools.

A

Data Execution Prevention

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

a software design technique for abstraction of a process

A

Data hiding

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

technique allow analysts to comb through data warehouses and look for potential correlated information.

A

Data Mining

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

large databases, store large amounts of information from a variety of databases for use with specialized analysis techniques.

A

Data Warehousing

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

A lock that uses strong metal components that cannot be easily forced.

A

Deadbolt Lock

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

A power or transmission line with a single function, such as data transmission, or to a single source such as an outlet for a computer.

A

Dedicated Line

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

Any physical or psychological device or method that discourages action.

A

Deterrent

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

The change in the frequency of a light wave or sound wave, resulting from relative motion of the source and the receiver.

A

Doppler Effect

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

high frequency noise

A

Electromagnetic Interference (EMI)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

A door lock that uses an electrically actuated magnetic attraction to secure the door. Magnetic locks use no moving parts.

A

Electromagnetic Lock

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

power surge

A

Electrostatic Discharge

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

hardware or software that is part of a larger system

A

Embedded

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

momentary loss of power

A

Fault

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

Alerts personnel to the presence of a fire

A

Fire Detection

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
45
Q

Reduces causes of fire

A

Fire Prevention

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
46
Q

to reduce fire

A

Fire Suppression

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
47
Q

reprogrammable basic startup instructions

A

Firmware

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
48
Q

An electrically conductive ribbon used for a sensing circuit.

A

Foil

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
49
Q

third party processes used to organize the implementation of an architecture

A

Framework

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
50
Q

fault tolerance for power

A

Generator

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
51
Q

Not model implementation, not answer

A

Gong

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
52
Q

focused on relationship between subjects and objects. Need update, delete, modify. Integrity security model.

A

Graham Denning

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
53
Q

More granular than Graham Denning. Access control with list and matrix. Integrity security model.

A

Harrison-Russo-Ullman

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
54
Q

mediation of covert channels must be addressed

A

Information Flow model

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
55
Q

A passive, low power, area protection device that detects a change in ambient temperature within the coverage pattern caused by the movement of a body.

A

Infrared Motion Detector

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
56
Q

specific format of technical and physical controls that support the chosen framework and the architecture

A

Infrastructure

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
57
Q

initial surge of current

A

Inrush Current

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
58
Q

natural occurrence in circuits that are in close proximity

A

Interference (noise)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
59
Q

An alarm system comprised of intrusion sensors and alarm annunciation devices for the purpose of detecting intruders.

A

Intrusion Detection Systems

60
Q

focused on the standardization and certification of an organization’s information security management system (ISMS), security governance, a standard; ISMS. Info security minimum systems

A

ISO 27001

61
Q

inspired from ISO 17799; a guideline which lists security control objectives and recommends a range of specific security controls; more granular than 27001. 14 areas

A

ISO 27002

62
Q

the past internationally accepted set of standards and processes for information security products evaluation and assurance, which separates function and assurance requirements

A

ITSEC

63
Q

Not model implementation, not answer

A

Jeuneman

64
Q

Not model implementation, not answer

A

Karger

65
Q

the core logic engine of an operating system which almost never changes

A

Kernel

66
Q

a one way, directed graph which indicates confidentiality or integrity flow

A

Lattice

67
Q

a programming design concept which abstracts one set of functions from another in a serialized fashion

A

Layering

68
Q

Not model implementation, not answer

A

Lee & Shockley

69
Q

Confidentiality and Integrity - use for VAX VMS and Windows

A

Lipner

70
Q

Subjects are labelled as to their level of clearance. Objects are labelled as to their level of classification or sensitivity.

A

MAC

71
Q

a physical enclosure for verifying identity before entry to a facility SYN- double door system

A

Mantrap

72
Q

cooperative hardware and operating system notification process for prioritizing execution due to the change in state of components

A

Masked/Interruptible

73
Q

When using memory resources, the processor must have some means of referring to various locations in memory. The solution to this problem is known as addressing

A

Memory Addressing

74
Q

a program in the operating system responsible for maintaining the hierarchical storage relocation requirements for processes and data from RAM to hard drives

A

Memory management

75
Q

An active intrusion sensor that detects the movement of a person or object through a pattern of microwave energy.

A

Microwave Sensor

76
Q

All of the code working in kernel mode/system mode in an ad hoc and non-modularized OS

A

Monolithic Operating System Architecture

77
Q

execute different parts of a program simultaneously

A

Multi Threading

78
Q

more than one CPU on a single board

A

Multi-Core

79
Q

to execute more than one instruction at an instant in time

A

Multi-processing

80
Q

more than one processor sharing same memory, also know as parallel systems

A

Multi-processor

81
Q

rapid switching back and forth between programs from the computer’s perspective and appearing to do more that one thing at a time from the user’s perspective

A

Multi-programming

82
Q

can offer several security levels without risk of compromising the system’s integrity.

A

Multi-state machine

83
Q

more than one process in the middle of executing at a time

A

Multi-tasking

84
Q

more than one CPU is involved.

A

Multiprocessing

85
Q

execute more than one task at the same time

A

Multitasking

86
Q

subjects will not interact with each other’s objects

A

Non-interference

87
Q

state of computer, to be running a process

A

Operating

88
Q

divides memory address space into even size blocks called pages. To emulate that we have more RAM than we have.
SYSTEM KERNAL KNOWS THE LOCATION OF THE PAGE FILE

A

Paging

89
Q

A kind of motion detector that uses a focused beam of light to detect an intruder.

A

Photoelectric Alarm

90
Q

using small special tools all tumblers of the lock are aligned for opening a door

A

Picking

91
Q

a type of multitasking that allows for more even distribution of computing time among competing request

A

Preemptive

92
Q

memory - RAM

A

Primary storage

93
Q

a form of data hiding which protects running threads of execution from using each other’s memory

A

Process isolation

94
Q

memory management technique that allows two processes to run concurrently without interaction

A

Protection

95
Q

Numerical values, Divides physical memory up into particular sized blocks, each of which has an associated numerical value called a protection key

A

Protection Keying

96
Q

two or more processes require access to the same resource and must complete their tasks in the proper order for normal functions

A

Race Condition

97
Q

lower frequency noise

A

Radio Frequency Interference (RFI)

98
Q

Red = trusted network, Orange = TCSEC evaluation
Brown = trusted facilities management dcsmmmTan = audit, Aqua = glossary.
Green = password management

A

Rainbow series

99
Q

the hardware and software mediator of all subject and object interactions which has as its primary goal security policy enforcement.

A

Reference Monitor

100
Q

memory management technique which allows data to be moved from one memory address to another

A

Relocation

101
Q

implementation of operating system protection mechanism, where more sensitive built upon the layering concept

A

Ring protection

102
Q

reduced instructions. Simpler operations per instruction. More fetches.

A

RISC

103
Q

a process state, to be executing a process on the CPU

A

Running

104
Q

is a derivative of PaaS. Provides on-demand online access to specific software applications or suites without the need for local installation. In many cases, there are few local hardware and OS limitations.

A

SaaS

105
Q

is an enterprise security architecture framework that is similar to the Zachman framework. It uses the six communication questions (What, Where, When, Why, Who, and How) that intersect with six layers (operational, component, physical, logical, conceptual, and contextual).

A

Sherwood Applied Business Security Architecture (SABSA)

106
Q

short period of low voltage.

A

Sag/Dip

107
Q

the hard drive

A

Secondary storage

108
Q

a template for the designing the architecture

A

Security Blueprint

109
Q

an administrative unit or a group of objects and subjects controlled by one reference monitor

A

Security domain

110
Q

subset of operating systems components dedicated to protection mechanisms

A

Security kernel

111
Q

dividing a computer’s memory into segments.

A

Segmentation

112
Q

memory management technique which allows subjects to use the same resource

A

Sharing

113
Q

operates in the security environment at the highest level of classification of the information within the computer. In other words, all users on that system must have clearance to access the info on that system.

A

Single state machine

114
Q

the applications and systems at a specific, self-contained location are evaluated.

A

Site accreditation

115
Q

used by processors to communicate instructions and data to each other

A

Stack Memory Segment

116
Q

abstract and mathematical in nature, defining all possible states, transitions and operations

A

State machine model

117
Q

a process state, to be either be unable to run waiting for an external event or terminated

A

Stopped

118
Q

(monitor, system, privileged) a state for operating system tasks only

A

Supervisor mode

119
Q

sudden rise in voltage in the power supply.

A

Surge

120
Q

to reduce sudden rises in current

A

Surge Suppressor

121
Q

The unauthorized entry into a facility or security container in a manner in which evidence of such entry is not discernable under normal circumstances.

A

Surreptitious Entry

122
Q

high degree of visual control

A

Surveillance

123
Q

Not model implementation, not answer

A

Sutherland

124
Q

a major application or general support system is evaluated.

A

System accreditation

125
Q

the past U.S. military accepted set of standards and processes for computer systems evaluation and assurance, which combines function and assurance requirements

A

TCSEC (Orange Book)

126
Q

people protect their domain

A

Territoriality

127
Q

a unit of execution

A

Threads

128
Q

the past U.S. military accepted set of standards and processes for network evaluation and assurance, which combines function and assurance requirements

A

TNI (Red Book)

129
Q

race condition exploits, and communication disconnects are known as state attacks because they attack timing, data flow control, and transition between one system state to another.

A

TOCTTOU attack

130
Q

Anti-personnel device, usually of barbed or concertina wire, installed at the tops of fences and along roof edges.

A

Top Guard

131
Q

line noise that is superimposed on the supply circuit.

A

Transients

132
Q

all of the protection mechanism in a computer system

A

Trusted Computing Base

133
Q

an application or system that is distributed to a number of different locations is evaluated.

A

Type accreditation

134
Q

A device that senses motion in a protected area by a Doppler shift in the transmitted ultrasonic energy.

A

Ultrasonic Detector

135
Q

to smooth out reductions or increases in power

A

UPS, Uninterruptible Power Source

136
Q

(problem or program state) the problems solving state, the opposite of supervisor mode

A

User mode

137
Q

memory management programming which make the limited RAM of the physical machine appear to be more by using a portion of the hard drive

A

Virtual Memory

138
Q

software-defined shared storage system is a virtual re-creation of a SAN on top of a virtualized network or an SDN.

A

Virtual SAN

139
Q

a process state, (blocked) needing input before continuing

A

Wait

140
Q

Zachman framework

A

Enterprise Architecture Framework
A two-dimensional model that intersects communication interrogatives (What, Why, Where, and so on) with various viewpoints (Planner, Owner, Designer, and so on). It is designed to help optimize communication between the various viewpoints during the creation of the security architecture.

141
Q

Large protected premises are divided into areas or zones, each having it own identification and/or annunciation.

A

Zone

142
Q

IPv6 features

A

Mobile
Quality of Service
Jumbograms
Next Header
IPsec as next header

143
Q

IPv6 Control
Limit unsanctioned paths

A

Threat
Vulnerable to eavesdropping and injection attacks -> v6 globally unique addresses ->
If VPN dropped, possible communication

144
Q

IPv6 Control
Limit addresses to a small range of a subnet and controlling assignment rate

A

NDP DoS attacks when a router is overwhelmed by address resolution requests

145
Q

IPv6 Control
Router advisement guard

A

Eavesdropping via spoofed router advertisements

146
Q

IPv6 Control
DHCPv6 - Shield filtering rules

A

Unauthorized ports and malicious packets for DHCP services

147
Q

IPv6 Control
PEPs configured to enforce recommended header order

A

Malformed packets: do not conform to the recommended header extension order or maximum number of extension header repetitions

Cyber Security (19 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions