Vulnerability scanner

automated tool to identify system vulnerabilities

program designed to take advantage of a known vulnerability

decoy system for early warning of search for confidential information

Deep packet inspection

process that examines data in the body of a TCP packet to control traffic

Time-based model of security

combination of controls that protect long enough to thwart attack

Multifactor authentication

use of two or more types of authentication credentials

Intrusion prevention system

software or hardware that monitors traffic flow patterns to block attacks

Modifying endpoint default configurations to delete unnecessary settings

set of if-then rules to determine what to do with incoming packets

Intrusion detection system

system that creates logs of all network traffic through the firewall

process of restricting access to specific portions of the system

process of examining logs to identify evidence of possible attacks

Multimodal authentication

use of two or more of the same type of authentication credentials

Access control matrix

table used to implement authorization controls

process of regularly applying patches and software updates

matching user authentication credentials against the access control matrix

process uses fields in packet IP/TCP headers to determine what to do

physical or behavioral characteristic

device to read source and destination address fields in IP packet headers

code released by software developers to fix vulnerabilities

separate network located outside the IS for controlled access from internet

device that connects IS to the internet

device that controls inbound and outbound communcation

verifying the identity of the person or device attempting access

studbud

Information Security

25 termsStudBud Administration997 plays

Imported from external platform

Flashcards25 cardsFPractice quizPHost liveL

Questions 25

Answers

1
Vulnerability scanner
a group therapy session
automated tool to identify system vulnerabilities
device that connects IS to the internet
device that controls inbound and outbound communcation
2
Exploit
program designed to take advantage of a known vulnerability
an authorized attempt to break into an entity's IS
high adventure
using a browser to remotely access software, data storage, and applications
3
Honeypot
Pooh's favorite food
decoy system for early warning of search for confidential information
program designed to take advantage of a known vulnerability
Workstations, printers, servers and other devices in a network
4
Deep packet inspection
process of examining logs for evidence of possible attacks
fortune telling by reading patterns left by tea leaves
process uses fields in packet IP/TCP headers to determine what to do
process that examines data in the body of a TCP packet to control traffic
5
Time-based model of security
system that creates logs of all network traffic
process of examining logs to identify evidence of possible attacks
combination of controls that protect long enough to thwart attack
employing retirees to watch the exits
6
Multifactor authentication
use of two or more types of authentication credentials
use of two or more of the same type of authentication credentials
comparing student resumes to official transcripts and SS record
process of restricting access to specific portions of the system
7
Intrusion prevention system
system that creates logs of all network traffic through the firewall
software or hardware that monitors traffic flow patterns to block attacks
separate network located outside the IS for controlled access from internet
a guard dog
8
Hardening
an authorized attempt to break into an entity's IS
code released by software developers to fix vulnerabilities
process of making steel
Modifying endpoint default configurations to delete unnecessary settings
9
Access control list
set of if-then rules to determine what to do with incoming packets
left swipe on a dating app
table used to implement authorization controls
device or software that controls inbound and outbound communication
10
Intrusion detection system
process of examining logs to identify evidence of possible attacks
system that creates logs of all network traffic through the firewall
a small, yappy dog
method for verifying identity of users attempting to connect via dial-in
11
Authorization
process of restricting access to specific portions of the system
wedding ring
use of two or more types of authentication credentials
use of two or more of the same type of authentication credentials
12
Log analysis
determining tree species by examining its grain
method for verifying identity of users attempting to connect via dial-in
system that creates logs of all network traffic through the firewall
process of examining logs to identify evidence of possible attacks
13
Multimodal authentication
use of two or more of the same type of authentication credentials
use of two or more types of authentication credentials
showing passport and utility bill at immigration
process of restricting access to specific portions of the system
14
Access control matrix
standard method for verifying identity of users connecting via dial-in
device or software that controls inbound and outbound communication
table used to implement authorization controls
a feature in sci-fi movies
15
Patch management
team responsible for dealing with major security incidents
process of regularly applying patches and software updates
code released by software developers to fix vulnerabilities
a seamstress
16
Defense in depth
BYU football team's defensive front four
multiple layers of control
using two or more of the same type of authentication credentials
process of restricting access to specific portions of the system
17
Compatibility test
verifying the identity of the person or device attempting access
a pre-nup agreement
matching user authentication credentials against the access control matrix
table used to implement authorization controls
18
Packet filtering
a tea bag
process that examines data in the body of a TCP packet to control traffic
process uses fields in packet IP/TCP headers to determine what to do
process of examining logs for evidence of possible attacks
19
Biometric identifier
verifying the identity of the person or device attempting access
process of restricting access to specific portions of the system
physical or behavioral characteristic
a person's resting heart rate
20
Router
a GPS-based software
device that connects IS to the internet
device to read source and destination address fields in IP packet headers
device that controls inbound and outbound communcation
21
Patch
program flaws exploited to crash or take control of a system
code released by software developers to fix vulnerabilities
fabric used to mend a tear
program designed to take advantage of a known vulnerability
22
Demilitarized zone
a neutral area between enemies
automated tool to identify system vulnerabilities
software or hardware to monitor patterns in traffic flow and block attacks
separate network located outside the IS for controlled access from internet
23
Border router
device that controls inbound and outbound communcation
a shepherd's companion
device that connects IS to the internet
device to read source and destination address fields in IP packet headers
24
Firewall
device to read source and destination address fields in IP packet headers
device that controls inbound and outbound communcation
a chemical retardant used to slow a wildfire
device that connects IS to the internet
25
Authentication
physical or behavioral characteristic
process of restricting access to specific portions of the system
comparing student resumes to official transcripts
verifying the identity of the person or device attempting access

Information Security Flashcards | StudBud