Comp sec+

Deterrent controls are focused on identifying and detecting security incidents

Adaptive identity : flexible approach to identity management

Profiting from cyber criminal activities

Detective controls are focused on identifying and detecting security incidents

What part of the control plane executes the policy engines decision

What is part of the control plane that reduces the attack surface ?

Software is an example of physical security

Real time checks of digital certificate validity

Subject /system identifies what

Trusted insider posing cyber security risks

Extortion using compromising information

Uses one key and encrypts a large amount of data using block cipher

Encrypts individual files

Restricted activities are a pause in activities

Uses two keys a private and a public key

Zero trust:

Encrypts a data base

Where scheduled changes are implemented

Authenticating people: verifies a persons _______

Rule book on how to carry out tasks

What are fake credentials or data placed as a trap to identify unauthorized access

Dependencies work fine on their own

Directive controls are ______ providing specific guidence

Activist hacker with political or social agenda

Criminal group seeking financial gain by cyber crime

What is an approval process?

Delivers cryptographic keys from a sender to a receiver

Disguising sensitive data by replacing original values with fictitious ones

A single certificate securing multiple servers using the same domain name

What is a TPM

Control plane managers and configures networks devices and _______

Trusted entities issuing and verifying digital certificates for secure online communication

What part of the control plane automates the enforcement of directives

Deny lists:

A decentralized digital ledger for secure transactions

Authorization models: control access permissions

Public facing certificates issued by external entities to verify the authenticity of of data

Preventative controls are aimed at preventing security incidents

Authenticating systems use 802.1x devices that are authenticated

Today consider the implications of any change

The scope or layer at which encryption is applied

Legacy applications have no vulnerabilities

PKI means

Hashing is used for data integrity and password security

Encrypts a single database record

What are types of technical controls

Managerial controls are , policies, procedures and guidelines for security management

Resources funding: availability of financial and tech support

Software solution used to create manage and store cryptographic keys

Testing new security measures

Ownership is someone who is responsible for a security task

Key escrow stores cryptographic keys

Version controls don’t track anything

Deliberately obscuring code that makes it difficult for the attacker to understand

Updating policies procedures maintain a secure environment

Honey pot lures attackers so that they can steal data

What part of the data plane monitors and enforces policies within the data plane?

Implicit trust zone’s are trusted areas holding resources

Cyber auctions aligned with moral principals

Root of trust : verify its authenticity by checking the certificates chain of trust

CIA stands for?

Unauthorized unregulated tech use within an organization

Non repudiation prevents denial of one’s actions ensuring accountability

Government back cyber operatives

Salting removes random values to a credential

Cryptographic technique designed to transform a password into a longer more complex key

Dependencies are devices and services that interconnect together

What sends out pulses of sounds waves

Gathering information for intelligence or competitive advantage

Service restart can cause weakness on restart

Pressure sensors detect :

Ensures authenticity integrity and job repudiation of a document

Allow lists allow a user or device

What detects frequency alterations

Infrared detects ________, identifying human presence

Updating diagrams outline your current environment

Authentication, authorization and _______

What is a bait file designed to detect and track unauthorized access

Catalogs of invalidated digital certificates ensuring security

Physical controls are measure to _____ safeguard physical assets and premises

Having a roll back option

Gap analysis helps achieve a desired state ______

Compensating controls are alternative measures to compensate for inadequate _______

Sophistication/ capability is the level of expertise and technological proficiency

Private keys are used for decryption and digital signatures

Public keys:

Self generated digital certificate lacking third party validation for internal use only

What is a network of honey pots

Stealing sensitive data for elicit purposes

Encrypts a single partition

Used to protect user data/ biometrics, and cryptographic keys

Creating chaos and confusion for various reasons

Service restarts can cause disruption to a system

Application restart are weaknesses that can emerge on restart

Engaging in cyber warfare or military conflict

Transforming sensitive data into unique tokens that hold no value

Restricted activities are activities that can cause harm

Down time impacts a pause in activities

Distributing systems or services intentionally

Physical controls are day to day security practices such as monitoring and access management

Novice with limited hacking skills

What luers attackers so we can monitor the latest attack methods ?

Salting adds random values to a credential

Employs intricate mathematical operations to ensure the irreversiblility of encryption

Certificate signing request generation: a new certificate request

Encrypts a full disk

Version controls track changes to documents and projects

Encrypted using SSL/TSL

Subject /system identifies gaps in security

Encrypts a single volume

Retaliatory actions driven by personal vendettas

A highly secure environment for the cryptographic keys

The hardware and software solutions applied to encryption

Hiding data inside data, image , or audio files

Originating from inside or outside an entity is internal/ external

Digital activism or ideology

Corrective controls are implemented after an incident to _____the impact

What part of the control plane enforces rules and policies