CISA Latest Update 2024/2025 with Verified Solutions

CISA Latest Update 2024/2025 with Verified Solutions Alternative power supplies Intended for power failures that last for longer periods and are normally coupled with other devices such as an uninterruptible power supply to compensate for the power loss until the alternate power supply becomes available Application Gateway It has specific proxies for each service. To handle web services, it has a Hypertext Transmission Protocol (HTTP) proxy that acts as an intermediary between externals and internals but is specifically for HTTP. This means that it not only checks the 1. packet Internet Protocol (IP) addresses (Open Systems Interconnection [OSI] Layer 3) 2. and the ports it is directed to (in this case port 80, or layer 4), 3. it also checks every HTTP command (OSI Layers 5 and 7). Therefore, it works in a more detailed (granularity) way Attribute sampling Used for compliance testing. Operation of the control is being evaluated Back door This is an opening implanted into or left in software that enables an unauthorized entry into a system. Baseband Network Baseband transmissions typically use digital signaling over a single wire; the transmissions themselves take the form of either electrical pulses or light. The digital signal used in baseband transmission occupies the entire bandwidth of the network media to transmit a single data signal. Baseband communication is bidirectional, allowing computers to both send and receive data using a single cable. However, the sending and receiving cannot occur on the same wire at the same time. LAN Black box penetration test Black box penetration testing assumes no prior knowledge of the infrastructure to be tested. Testers simulate an attack from someone who is unfamiliar with the system. It is important to have management knowledge of the proceedings so that if the test is identified by the monitoring systems, the legality of the actions can be determined quickly. Botnet A botnet is a number of Internet-connected devices, each of which is running one or more bots. Botnets can be used to perform distributed denial-of-service attack (DDoS attack), steal data, send spam, and allows the attacker to access the device and its connection. Broadband network digital transmission uses analog signals in the form of optical or electromagnetic waves over multiple transmission frequencies. For signals to be both sent and received, the transmission media must be split into two channels. Alternatively, two cables can be used: one to send and one to receive transmissions. The secure use of broadband communications is subject to whether the network is shared with other users, the data are encrypted and the risk of network interruption. Business risk This is a probable situation with uncertain frequency and magnitude of loss (or gain). capability maturity model (CMM) Used to develop and refine an organization's software development process. The model describes a five-level evolutionary path of increasingly organized and systematically more mature processes. Certificate Authority The primary role of the CA is to digitally sign and publish the public key bound to a given user. This is done using the CA's own private key, so that trust in the user key relies on one's trust in the validity of the CA's key. When the CA is a third party separate from the user and the system, then it is called the Registration Authority (RA), which may or may not be separate from the CA. The key-to-user binding is established, depending on the level of assurance the binding has, by software or under