Security Operations

Question 1

Entitlement

Answer 1

Refers to the amount of privileges granted to users, typically when first provisioning an account. In other words, when a administrators create user accounts, they ensure the accounts are provisioned with the appropriate amount of resources, and this includes privileges.

Question 2

Aggregation

Answer 2

In the context of least privileges, aggregation refers to the amount of privileges that users collect over time.

Question 3

Transitive Trust

Answer 3

A nontransitive trust exists between two security domains, which could be within the same organization or between different organizations.

Question 4

Incident Response steps

Answer 4

Detection –> Response –> Mitigation –> Reporting –> Recovery –> Remediation –> Lessons Learned

Question 5

Smurf Attack

Answer 5

A distributed denial-of-service attack in which large numbers of Internet Control Message Protocol (ICMP) packets with the intended victim’s spoofed source IP are broadcast to a computer network using an IP broadcast address.

Question 6

Fraggle Attack

Answer 6

A denial-of-service (DoS) attack that involves sending a large amount of spoofed UDP traffic to a router’s broadcast address within a network.