CIA triad (Confidentiality, Integrity, Availability) - ANSWER
AAA Of Security - ANSWER Authentication, Authorization, and Accounting
Checksums - ANSWER Method to verify the integrity of data during transmission
Digital Signatures - ANSWER Ensure Both Integrity of data during transaction
Server Redundancy - ANSWER Involves using multiple servers in a load balanced or
failover configuration so that if one is overloaded or fails, the other servers can take over the
load to continue supporting your end users
Network Redundancy - ANSWER Ensures that if one network path fails, the data can
travel through another route
data redundancy - ANSWER involves storing data in multiple places
Power Redundancy - ANSWER involves using backup power sources, like generators
and ups systems
Non-repudiation - ANSWER provides undeniable proof in the world of digital
transactions. Cant deny participation or authenticity of their actions
1
,Syslog servers - ANSWER used to aggregate logs from various network devices and
systems so that system administrators can analyze them to detect patterns or anomalies in
the organizations systems
Technical Controls - ANSWER "technology", hardware, and software mechanisms that
are implemented to manage and reduce risks
Managerial Controls - ANSWER ("Managing" things) also referred to administrative
controls, involve the strategic planning and governance side of security
Operational Controls - ANSWER Procedures and measures that are designed to
protect data on a day to day basis. Are mainly governed by internal processes and human
actions
Preventive - ANSWER Proactive measures implemented to thwart potentical security
threats or breaches
Deterrent Controls - ANSWER Discourage potential attackers by making the effort
seem less appealing or more challenging
Detective Controls - ANSWER (detect) Monitor and alert organizations to malicious
activities as they occur
Corrective Controls - ANSWER Mitigate any potential damage and restore our systems
to their normal state
Compensating Controls - ANSWER Alternative measures that are implemented when
primary security controls are not feasible or effective
Directive Controls - ANSWER Guide, inform, or mandate actions. Often rooted in
Policy.
2
, gap analysis - ANSWER Process of evaluating the differences between an organizations
current performance and its desired performance
Zero Trust - ANSWER Demands verification for every device, user, and transaction with
the network
Data plane - ANSWER Ensures policies are properly executed
honeypot - ANSWER decoy systems to attract and deceive attackers
honeynets - ANSWER network of decoy systems for observing complex attacks
honeyfiles - ANSWER decoy files to detect unauthorized access or data breaches
(APT) Advanced Persistent Threat - ANSWER Nation-state actor because of their long
term persistence and stealth
Threat Vector - ANSWER Means or pathway by which an attacker can gain
unauthorized access to a computer or network
Vishing - ANSWER Voice Phishing
(MDM) Mobile device management - ANSWER Manages Phones, remote wipe,
geolocation, installs certain apps Ex) jampf
Smishing - ANSWER SMS phishing
3
AAA Of Security - ANSWER Authentication, Authorization, and Accounting
Checksums - ANSWER Method to verify the integrity of data during transmission
Digital Signatures - ANSWER Ensure Both Integrity of data during transaction
Server Redundancy - ANSWER Involves using multiple servers in a load balanced or
failover configuration so that if one is overloaded or fails, the other servers can take over the
load to continue supporting your end users
Network Redundancy - ANSWER Ensures that if one network path fails, the data can
travel through another route
data redundancy - ANSWER involves storing data in multiple places
Power Redundancy - ANSWER involves using backup power sources, like generators
and ups systems
Non-repudiation - ANSWER provides undeniable proof in the world of digital
transactions. Cant deny participation or authenticity of their actions
1
,Syslog servers - ANSWER used to aggregate logs from various network devices and
systems so that system administrators can analyze them to detect patterns or anomalies in
the organizations systems
Technical Controls - ANSWER "technology", hardware, and software mechanisms that
are implemented to manage and reduce risks
Managerial Controls - ANSWER ("Managing" things) also referred to administrative
controls, involve the strategic planning and governance side of security
Operational Controls - ANSWER Procedures and measures that are designed to
protect data on a day to day basis. Are mainly governed by internal processes and human
actions
Preventive - ANSWER Proactive measures implemented to thwart potentical security
threats or breaches
Deterrent Controls - ANSWER Discourage potential attackers by making the effort
seem less appealing or more challenging
Detective Controls - ANSWER (detect) Monitor and alert organizations to malicious
activities as they occur
Corrective Controls - ANSWER Mitigate any potential damage and restore our systems
to their normal state
Compensating Controls - ANSWER Alternative measures that are implemented when
primary security controls are not feasible or effective
Directive Controls - ANSWER Guide, inform, or mandate actions. Often rooted in
Policy.
2
, gap analysis - ANSWER Process of evaluating the differences between an organizations
current performance and its desired performance
Zero Trust - ANSWER Demands verification for every device, user, and transaction with
the network
Data plane - ANSWER Ensures policies are properly executed
honeypot - ANSWER decoy systems to attract and deceive attackers
honeynets - ANSWER network of decoy systems for observing complex attacks
honeyfiles - ANSWER decoy files to detect unauthorized access or data breaches
(APT) Advanced Persistent Threat - ANSWER Nation-state actor because of their long
term persistence and stealth
Threat Vector - ANSWER Means or pathway by which an attacker can gain
unauthorized access to a computer or network
Vishing - ANSWER Voice Phishing
(MDM) Mobile device management - ANSWER Manages Phones, remote wipe,
geolocation, installs certain apps Ex) jampf
Smishing - ANSWER SMS phishing
3
