Security Operations

Question 1

A computer responsible for hosting applications to user workstations. NIST SP 800-82 Rev.2

Answer 1

Application Server

Question 2

An algorithm that uses one key to encrypt and a different key to decrypt the input plaintext.

Answer 2

Asymmetric Encryption

Question 3

A digit representing the sum of the correct digits in a piece of stored or transmitted digital data, against which later comparisons can be made to detect errors in the data.

Answer 3

Checksum

Question 4

The altered form of a plaintext message so it is unreadable for anyone except the intended recipients. In other words, it has been turned into a secret.

Answer 4

Ciphertext

Question 5

identifies the degree of harm to the organization, its stakeholders or others that might result if an information asset is divulged to an unauthorized person, process or organization.

Answer 5

Classification

Question 6

A process and discipline used to ensure that the only changes made to a system are those that have been authorized and validated.

Answer 6

Configuration management

Question 7

One who performs the study of mathematical techniques for attempting to defeat cryptographic techniques and/or information systems security. This includes the process of looking for errors or weaknesses in the implementation of an algorithm or of the algorithm itself.

Answer 7

Cryptanalyst

Question 8

The study or applications of methods to secure or protect the meaning and content of messages, files, or other information, usually by disguise, obscuration, or other transformations of that content and meaning.

Answer 8

Cryptography

Question 9

System capabilities designed to detect and prevent the unauthorized use and transmission of information.

Answer 9

Data Loss Prevention (DLP)

Question 10

The reverse process from encryption. It is the process of converting a ciphertext message back into plaintext through the use of the cryptographic algorithm and the appropriate key (which is the same for symmetric encryption, but different for asymmetric encryption). This term is also used interchangeably with the “deciphering.”

Answer 10

Decryption

Question 11

A technique of erasing data on disk or tape (including video tapes) that, when performed properly, ensures that there is insufficient magnetic remanence to reconstruct data.

Answer 11

Degaussing

Question 12

The result of a cryptographic transformation of data which, when properly implemented, provides the services of origin authentication, data integrity, and signer non-repudiation. NIST SP 800-12 Rev. 1
Egress Monitoring - Monitoring of outgoing network traffic.

Answer 12

Digital Signature

Question 13

Monitoring of outgoing network traffic.

Answer 13

Egress Monitoring

Question 14

The process and act of converting the message from its plaintext to ciphertext. Sometimes it is also referred to as enciphering. The two terms are sometimes used interchangeably in literature and have similar meanings.

Answer 14

Encryption

Question 15

The total set of algorithms, processes, hardware, software, and procedures that taken together provide an encryption and decryption capability.

Answer 15

Encryption System

Question 16

A reference to the process of applying secure configurations (to reduce the attack surface) and locking down various hardware, communications systems, and software, including operating system, web server, application server, application, etc.

Answer 16

Hardening

Question 17

An algorithm that computes a numerical value (called the hash value) on a data file or electronic message that is used to represent that file or message and depends on the entire contents of the file or message.

Answer 17

Hash Function

Question 18

The process of using a mathematical algorithm against data to produce a numeric value that is representative of that data. Source CNSSI 4009-2015

Answer 18

Hashing

Question 19

Monitoring of incoming network traffic.

Answer 19

Ingress Monitoring

Question 20

A digital signature that uniquely identifies data and has the property such that changing a single bit in the data will cause a completely different message digest to be generated. NISTIR-8011 Vol.3

Answer 20

Message Digest

Question 21

The software “master control application” that runs the computer. It is the first program loaded when the computer is turned on, and its main component, the kernel, resides in memory at all times.

Answer 21

Operating System

Question 22

A software component that, when installed, directly modifies files or device settings related to a different software component without changing the version number or release details for the related software component. Source: ISO/IEC 19770-2

Answer 22

Patch

Question 23

The systematic notification, identification, deployment, installation and verification of operating system and application software code revisions. These revisions are known as patches, hot fixes, and service packs. Source: CNSSI 4009

Answer 23

Patch Management

Question 24

A message or data in its natural format and in readable form; extremely vulnerable from a confidentiality perspective.

Answer 24

Plaintext

Question 25

The recordings (automated and/or manual) of evidence of activities performed or results achieved (e.g., forms, reports, test results), which serve as a basis for verifying that the organization and the information system are performing as intended.

Answer 25

Records

Question 26

A practice based on the records life cycle, according to which records are retained as long as necessary, and then are destroyed after the appropriate time interval has elapsed.

Answer 26

Records Retention

Question 27

Residual information remaining on storage media after clearing. NIST SP 800-88 Rev. 1

Answer 27

Remanence

Question 28

The first stage of change management, wherein a change in procedure or product is sought by a stakeholder.

Answer 28

Request for change (RFC)

Question 29

The entirety of the policies, roles, and processes the organization uses to make security decisions in an organization.

Answer 29

Security Governance

Question 30

Tactics to infiltrate systems via email, phone, text, or social media, often impersonating a person or agency in authority or offering a gift.

Answer 30

Social engineering

Question 31

An algorithm that uses the same key in both the encryption and the decryption processes.

Answer 31

Symmetric encryption

Question 32

A computer that provides World Wide Web (WWW) services on the Internet. It includes the hardware, operating system, Web server software, and Web site content (Web pages).

Answer 32

Web Server

Question 33

hishing attacks that attempt to trick highly placed officials or private individuals with sizable assets into authorizing large fund wire transfers to previously unknown entities.

Answer 33

Whaling Attack