Secure baselines - ANSWER Establishing, deploying, and maintaining hardened targets
to ensure a secure starting point for systems
Hardening targets - ANSWER Securing various types of devices, including mobile
devices, workstations, switches, routers, cloud infrastructure, servers, ICS/SCADA,
embedded systems, real-time operating systems (RTOS), and Internet of Things (IoT) devices
Wireless devices - ANSWER Devices that connect wirelessly, such as mobile devices,
laptops, and IoT devices
Installation considerations - ANSWER Factors to consider when installing wireless
devices, including performing site surveys and creating heat maps to optimize coverage and
minimize interference
Mobile device management (MDM) - ANSWER A system used to manage and secure
mobile devices within an organization, including device provisioning, configuration, and
monitoring
Deployment models - ANSWER Different models for deploying mobile devices,
including bring your own device (BYOD), corporate-owned personally enabled (COPE), and
choose your own device (CYOD)
Connection methods - ANSWER Different methods for connecting wireless devices,
including cellular networks, Wi-Fi, and Bluetooth
1
,Wireless security settings - ANSWER Settings and protocols used to secure wireless
networks, such as Wi-Fi Protected Access 3 (WPA3), Remote Authentication Dial-In User
Service (RADIUS), cryptographic protocols, and authentication protocols
Application security - ANSWER Protecting applications from vulnerabilities, including
input validation, secure cookies, static code analysis, and code signing
Sandboxing - ANSWER Isolating applications to prevent them from accessing sensitive
resources or compromising the system
Monitoring - ANSWER Continuous monitoring of systems and networks for security
threats and anomalies
Acquisition Process - ANSWER The process of obtaining assets for an organization.
Assignment Process - ANSWER The process of assigning ownership and classifying
assets.
Monitoring Process - ANSWER The process of tracking and managing inventory of
assets.
Inventory - ANSWER A detailed list of all assets owned by an organization.
Enumeration Process - ANSWER The process of counting and recording the number of
assets.
Disposal Process - ANSWER The process of getting rid of assets that are no longer
needed.
2
, Sanitization Process - ANSWER The process of removing sensitive data from assets
before disposal.
Destruction Process - ANSWER The process of physically destroying assets to prevent
recovery of data.
Certification Process - ANSWER The process of verifying that assets have been
properly disposed of.
Data Retention - ANSWER The process of storing and managing data for a specified
period of time.
Identification methods - ANSWER Techniques used to identify vulnerabilities in a
system
Vulnerability scan - ANSWER Process of scanning a system to identify potential
vulnerabilities
Application security - ANSWER Measures taken to secure applications from
vulnerabilities
Static analysis - ANSWER Analyzing an application's source code without executing it
to identify vulnerabilities
Dynamic analysis - ANSWER Analyzing an application's behavior during runtime to
identify vulnerabilities
Package monitoring - ANSWER Monitoring software packages for vulnerabilities
Threat feed - ANSWER Source of information about current threats and vulnerabilities
3
to ensure a secure starting point for systems
Hardening targets - ANSWER Securing various types of devices, including mobile
devices, workstations, switches, routers, cloud infrastructure, servers, ICS/SCADA,
embedded systems, real-time operating systems (RTOS), and Internet of Things (IoT) devices
Wireless devices - ANSWER Devices that connect wirelessly, such as mobile devices,
laptops, and IoT devices
Installation considerations - ANSWER Factors to consider when installing wireless
devices, including performing site surveys and creating heat maps to optimize coverage and
minimize interference
Mobile device management (MDM) - ANSWER A system used to manage and secure
mobile devices within an organization, including device provisioning, configuration, and
monitoring
Deployment models - ANSWER Different models for deploying mobile devices,
including bring your own device (BYOD), corporate-owned personally enabled (COPE), and
choose your own device (CYOD)
Connection methods - ANSWER Different methods for connecting wireless devices,
including cellular networks, Wi-Fi, and Bluetooth
1
,Wireless security settings - ANSWER Settings and protocols used to secure wireless
networks, such as Wi-Fi Protected Access 3 (WPA3), Remote Authentication Dial-In User
Service (RADIUS), cryptographic protocols, and authentication protocols
Application security - ANSWER Protecting applications from vulnerabilities, including
input validation, secure cookies, static code analysis, and code signing
Sandboxing - ANSWER Isolating applications to prevent them from accessing sensitive
resources or compromising the system
Monitoring - ANSWER Continuous monitoring of systems and networks for security
threats and anomalies
Acquisition Process - ANSWER The process of obtaining assets for an organization.
Assignment Process - ANSWER The process of assigning ownership and classifying
assets.
Monitoring Process - ANSWER The process of tracking and managing inventory of
assets.
Inventory - ANSWER A detailed list of all assets owned by an organization.
Enumeration Process - ANSWER The process of counting and recording the number of
assets.
Disposal Process - ANSWER The process of getting rid of assets that are no longer
needed.
2
, Sanitization Process - ANSWER The process of removing sensitive data from assets
before disposal.
Destruction Process - ANSWER The process of physically destroying assets to prevent
recovery of data.
Certification Process - ANSWER The process of verifying that assets have been
properly disposed of.
Data Retention - ANSWER The process of storing and managing data for a specified
period of time.
Identification methods - ANSWER Techniques used to identify vulnerabilities in a
system
Vulnerability scan - ANSWER Process of scanning a system to identify potential
vulnerabilities
Application security - ANSWER Measures taken to secure applications from
vulnerabilities
Static analysis - ANSWER Analyzing an application's source code without executing it
to identify vulnerabilities
Dynamic analysis - ANSWER Analyzing an application's behavior during runtime to
identify vulnerabilities
Package monitoring - ANSWER Monitoring software packages for vulnerabilities
Threat feed - ANSWER Source of information about current threats and vulnerabilities
3
