Summer Week 1 - Terms

Information that is primarily stored on specific media, rather than moving from one medium to another.

What is the fundamental security goal of ensuring continuous operations?

The process of determining what rights and privileges a particular entity has.

A type of security control that discourages intrusion attempts.

Which security goal focuses on accuracy and preventing unauthorized modifications?

type of security control that acts before an incident to eliminate or reduce the likelihood that an attack can succeed.

Which attack type demands payment to prevent data release?

A category of security control that provides oversight of information systems. 

A type of threat actor that uses hacking and computer fraud for commercial gain.

The science, art, and practice of breaking codes and ciphers.

access control model where resources are protected by inflexible, system-defined rules.

type of security control that acts during an incident to identify or record that it is happening.

What is a category of security control that is implemented by people

A technology or procedure put in place to mitigate vulnerabilities and risk and to ensure the CIA

Malicious software or hardware that can record user keystrokes.

Also known as shared-key encryption.

Information that is present in the volatile memory of a host, such as system memory or cache.

Which control type is implemented by people?

A method of validating a particular entity's or individual's unique credentials.

A type of control that enforces a rule of behavior through a policy or contract.

What is data that is stored and not moving?

What is a category of security control that provides oversight of information systems.

Who manages information technology assets in a company?

Which practice combines software development and systems operations?

Which access control model is based on job functions?

What is a category of security control that is implemented as a system.

What does PKI stand for?

Which role is responsible for overall information assurance?

A type of threat actor that is supported by the resources of its host country's military and security services.

What does SOC stand for?

A security measure that takes on risk mitigation when a primary control fails or cannot completely meet expectations.

A type of security control that acts after an incident to eliminate or minimize its impact.

What is used to verify integrity and authenticity of a message?

Security settings that control access to objects including file system items and network resources.

The result of the decryption of encrypted data.

What type of control acts before an incident?

A person or entity responsible for an event that has been identified as a security incident or as a risk

Malware that creates a backdoor remote administration channel

What does the CIA Triad stand for in cybersecurity?

What type of attack redirects users from legitimate websites to malicious ones?

A malicious software program hidden within an innocuous-seeming piece of software.

What does a rootkit do?

The science and practice of altering data to make it unintelligible to unauthorized parties.

Which team responds to computer security incidents?

What is the process of deploying an account or host?

email-based social engineering attack in which the attacker sends email from a supposedly reputable source

The degree of access that a threat actor possesses before initiating an attack

Set of operational rules or restrictions to enforce a least privileges permissions policy.

Which attack type tricks users into revealing info via phone?

Data that has been enciphered and cannot be read without the cipher key.

What does CIA triad stand for?