Security Hardening

Question 1

Security Hardening

Answer 1

The process of strengthening a system to reduce its vulnerability and attack surface

Question 2

attack surface

Answer 2

all the vulnerabilities that a threat actor could exploit

Question 3

OS

Answer 3

Operating system

Question 4

Patch update

Answer 4

addresses security vulnerabilities within a program or product

Question 5

Baseline Configuration

Answer 5

A documented set of specifications within a system that is used as a basis for future builds, releases, and updates

Question 6

SPP

Answer 6

Strong password policy

Question 7

MFA

Answer 7

Multifactor Authentication

Question 8

Dictionary Attack

Answer 8

using common dictionary words to try to guess a password

Question 9

Hashing

Answer 9

converting a password to a hash that can be used to verify the autenticity of the password

Question 10

Salting

Answer 10

adding random characters to a hashed password

Question 11

CAPTCHA

Answer 11

Complete automated public turing test

Question 12

Network Log Analysis

Answer 12

The process of examining network logs to identify events of interest

Question 13

SEIM Tool

Answer 13

An application that collects and analyzes data to monitor critical activities in an organization. Ranks vulnerabilities from high to low

Question 14

Port filtering

Answer 14

A firewall principle that blocks certain ports from being used

Question 15

Encryption Standards

Answer 15

Rules/policies for how encryption is done

Question 16

defense in depth

Answer 16

adding multiple layers of security to networks, devices, and software

Question 17

Intrusion Detection system (IDS)

Answer 17

monitors system activity and alerts on possible intrusions. Does this by packet sniffing and analyzing for common intrusion methods.

Doesn’t stop traffic

Question 18

Intrusion Prevention System

Answer 18

Proactively searches for signatures of known attacks and data anomalies in packets, and blocks the sender if it seems suspicious

Question 19

Full packet captures

Answer 19

records and analyzes all the data transmitted over your network

Question 20

IAM

Answer 20

Identity access management (processes and technologies that help orgs manage digital identities in their env.

Important idea: user role management

Question 21

Configuration

Answer 21

Setting up the cloud systems

Question 22

Zero Day Attack

Answer 22

An exploit that was previously unkown