SECURITY + CERTMASTER|QUESTION WITH
100% CORRECT ANSWERS
VM escape - ✔️✔️An attack that allows an attacker to access the host system from within a
virtual machine. The primary protection is to keep hosts and guests up to date with current
patches.
VM sprawl - ✔️✔️A vulnerability that occurs when an organization has many VMs that aren't
properly managed. Unmanaged VMs are not kept up to date with current patches. Compare
with system sprawl.
Edge computing - ✔️✔️moving processing and data storage away from a centralized location to
the "edges" of a network
Public Cloud Model - ✔️✔️Available to everyone over the internet
Private Cloud Model - ✔️✔️Provides computing services offered either over internet or within
internal network
SDN (Software Defined Networking) - ✔️✔️Separates data and control planes in a network. Uses
virtualization to route traffic to its intended destination instead of using proprietary hardware.
Provisioning - ✔️✔️The process of deploying an application to the target environment, such as
enterprise desktops, mobile devices, or cloud infrastructure.
Containerization - ✔️✔️packages an application and its dependencies together in a separated
area but uses the OS of the host environment
,Integrity measurement - ✔️✔️Identify baseline deviations. Automated tools continuously
monitor the system for any baseline changes. If changes are found, Group Policy will force the
system back to its original state.
Least functionality - ✔️✔️A core principle of secure systems design. Systems should be deployed
with only the applications, services, and protocols needed to meet their purpose.
Blacklisting - ✔️✔️Group policy that blocks certain applications to be installed but allows others
Automated scripting - ✔️✔️Can help systems stay in secured state -- continuously checking
configurations of a system and react accordingly to keep systems secure and available
Fault tolerance - ✔️✔️allows the program to continue working in the event of a failure of some
of the parts
Error Handling - ✔️✔️A programming process that handles errors gracefully.
Continuous Delivery - ✔️✔️Software development method in which app and platform
requirements are frequently tested and validated for immediate availability.
Continuous Integration - ✔️✔️As soon as the work on a task is complete, it is integrated into the
whole system. After any such integration, all the unit tests in the system must pass.
SDLC (Systems Development Life Cycle) - ✔️✔️Defining requirements, design, implementation,
verification, and maintenance
Model verification - ✔️✔️Testing to ensure software meets the customers functional and
physical requirements
,Memory management - ✔️✔️The process of keeping track of what programs are in memory and
where in memory they reside. Poor management leads to overflow.
Stored procedure - ✔️✔️a computer program stored in the database that is used to enforce
business rules.
Client-side Input Validation - ✔️✔️Validation code is included in the HTML page
(Possible to bypass by disabling JavaScript or using a web proxy)
server-side validation - ✔️✔️Having the server perform all validations and error recovery
procedures.
capability delivery team - ✔️✔️Reduces development risk while increasing speed of delivery to
customer
normalization - ✔️✔️Optimize database performance by removing duplicates, use primary keys,
and related data contained in separate tables
Crossover Error Rate (CER) - ✔️✔️The point at which FRR equals FAR. Expressed as a percentage,
this is the most important metric. Important in fine tuning
Distinguished name - ✔️✔️A naming system that uniquely identifies the location of the object in
the Active Directory structure
RBAC (Role Based Access Control) - ✔️✔️An access control model where resources are protected
by ACLs that are managed by administrators and that provide user permissions based on job
functions.
802.1x - ✔️✔️The IEEE standard that defines port-based security for wireless network access
control
, HMAC-based one-time password (HOTP) - ✔️✔️A one-time password that changes when a
specific event occurs.
TOTP (Time-Based One-Time Password) - ✔️✔️similar to HOTP, but it uses a timestamp instead
of a counter. One-time passwords created with TOTP expire after 30 seconds
push notification - ✔️✔️Sends a message ot a Mobile phone via an authentication service for 2fa.
Retinal Scans - ✔️✔️More intrusive but more accurate than iris scans. Can be very expensive.
Iris scans - ✔️✔️Match patterns on the surface of the eye using IR imaging. Less intrusive, less
expensive and quicker.
Directory Services - ✔️✔️A system
that enables network resources to
be viewed as objects stored in a
database. This database can then
be divided and distributed among
different servers on the network.
An example of directory services
includes LDAP or Microsoft Active
Directory
RBAC - ✔️✔️Role-based access control. An access control model that uses roles to define access
and it is often implemented with groups. A user account is placed into a role, inheriting the
rights and permissions of the role. Other access control models are MAC and DAC.
100% CORRECT ANSWERS
VM escape - ✔️✔️An attack that allows an attacker to access the host system from within a
virtual machine. The primary protection is to keep hosts and guests up to date with current
patches.
VM sprawl - ✔️✔️A vulnerability that occurs when an organization has many VMs that aren't
properly managed. Unmanaged VMs are not kept up to date with current patches. Compare
with system sprawl.
Edge computing - ✔️✔️moving processing and data storage away from a centralized location to
the "edges" of a network
Public Cloud Model - ✔️✔️Available to everyone over the internet
Private Cloud Model - ✔️✔️Provides computing services offered either over internet or within
internal network
SDN (Software Defined Networking) - ✔️✔️Separates data and control planes in a network. Uses
virtualization to route traffic to its intended destination instead of using proprietary hardware.
Provisioning - ✔️✔️The process of deploying an application to the target environment, such as
enterprise desktops, mobile devices, or cloud infrastructure.
Containerization - ✔️✔️packages an application and its dependencies together in a separated
area but uses the OS of the host environment
,Integrity measurement - ✔️✔️Identify baseline deviations. Automated tools continuously
monitor the system for any baseline changes. If changes are found, Group Policy will force the
system back to its original state.
Least functionality - ✔️✔️A core principle of secure systems design. Systems should be deployed
with only the applications, services, and protocols needed to meet their purpose.
Blacklisting - ✔️✔️Group policy that blocks certain applications to be installed but allows others
Automated scripting - ✔️✔️Can help systems stay in secured state -- continuously checking
configurations of a system and react accordingly to keep systems secure and available
Fault tolerance - ✔️✔️allows the program to continue working in the event of a failure of some
of the parts
Error Handling - ✔️✔️A programming process that handles errors gracefully.
Continuous Delivery - ✔️✔️Software development method in which app and platform
requirements are frequently tested and validated for immediate availability.
Continuous Integration - ✔️✔️As soon as the work on a task is complete, it is integrated into the
whole system. After any such integration, all the unit tests in the system must pass.
SDLC (Systems Development Life Cycle) - ✔️✔️Defining requirements, design, implementation,
verification, and maintenance
Model verification - ✔️✔️Testing to ensure software meets the customers functional and
physical requirements
,Memory management - ✔️✔️The process of keeping track of what programs are in memory and
where in memory they reside. Poor management leads to overflow.
Stored procedure - ✔️✔️a computer program stored in the database that is used to enforce
business rules.
Client-side Input Validation - ✔️✔️Validation code is included in the HTML page
(Possible to bypass by disabling JavaScript or using a web proxy)
server-side validation - ✔️✔️Having the server perform all validations and error recovery
procedures.
capability delivery team - ✔️✔️Reduces development risk while increasing speed of delivery to
customer
normalization - ✔️✔️Optimize database performance by removing duplicates, use primary keys,
and related data contained in separate tables
Crossover Error Rate (CER) - ✔️✔️The point at which FRR equals FAR. Expressed as a percentage,
this is the most important metric. Important in fine tuning
Distinguished name - ✔️✔️A naming system that uniquely identifies the location of the object in
the Active Directory structure
RBAC (Role Based Access Control) - ✔️✔️An access control model where resources are protected
by ACLs that are managed by administrators and that provide user permissions based on job
functions.
802.1x - ✔️✔️The IEEE standard that defines port-based security for wireless network access
control
, HMAC-based one-time password (HOTP) - ✔️✔️A one-time password that changes when a
specific event occurs.
TOTP (Time-Based One-Time Password) - ✔️✔️similar to HOTP, but it uses a timestamp instead
of a counter. One-time passwords created with TOTP expire after 30 seconds
push notification - ✔️✔️Sends a message ot a Mobile phone via an authentication service for 2fa.
Retinal Scans - ✔️✔️More intrusive but more accurate than iris scans. Can be very expensive.
Iris scans - ✔️✔️Match patterns on the surface of the eye using IR imaging. Less intrusive, less
expensive and quicker.
Directory Services - ✔️✔️A system
that enables network resources to
be viewed as objects stored in a
database. This database can then
be divided and distributed among
different servers on the network.
An example of directory services
includes LDAP or Microsoft Active
Directory
RBAC - ✔️✔️Role-based access control. An access control model that uses roles to define access
and it is often implemented with groups. A user account is placed into a role, inheriting the
rights and permissions of the role. Other access control models are MAC and DAC.
