Threats and Vulnerabilities

Question 1

Threats and Vulnerabilities

A weakness inherent in an asset that leaves it open to a threat

Answer 1

Vulnerability

Question 2

Threats and Vulnerabilities

An attack (exploit) that a malicious actor will use against an asset

Answer 2

Threat

Question 3

Threats and Vulnerabilities

Individuals or orgs who perpetrate attacks against vulnerabilities

ie: script kiddies

Answer 3

Threat Actors

Question 4

Threats and Vulnerabilities

Pathways to gain access to infrastructure
weak configs
open firewall ports
lack of user security awareness
lack of mfa
missing patches
ie - Equifax hack
infected USB thumb drives
Stuxnet work

Answer 4

Attack vectors

Question 5

Threats and Vulnerabilities

Attack Vectors against
- manufacturers
- contractors
- implementers
- outsourced s/w development
Right-to-audit clause

Answer 5

Supply-chain attack

Question 6

Threats and Vulnerabilities

Takes advantage of a vulnerability

Answer 6

Exploits

Question 7

Threats and Vulnerabilities

Sources of threats

Answer 7

Threat actors

Question 8

Threats and Vulnerabilities

Pathways to gain access to restricted systems

Answer 8

Attack vectors