Security Control Categories (List All 4) - ANSWER Technical,
Managerial/Administrative, Operational, Physical
Security Control Types (List All 6) - ANSWER Preventive,
Deterrent,
Detective,
Corrective,
Compensating,
Directive
CIA Triad - ANSWER Confidentiality, Integrity, Availability
AAA Framework - ANSWER Authentication, Authorization,
Accounting
Gap Analysis - ANSWER Analyzing the gap between the current security posture and
the goal security posture of the organization
Zero Trust - ANSWER A wholistic system that covers every device, process, and person,
requiring verification for everything, nothing is inherently trusted
Planes of Operation (List Both) - ANSWER Data Plane and Control Plane
1
,Policy Decision Point (PDP) - ANSWER Entity which receives untrusted requests, made
up of a Policy Engine and Policy Administrator
Policy Engine - ANSWER Evaluates access decision based on policy and other
information, grants, denies, or revokes access
Policy Administrator - ANSWER Generates Access Tokens or credentials,
Communicates with the Policy Enforcement Point (PEP)
Policy Enforcement Point (PEP) - ANSWER Endpoint which receives untrusted requests
and sends them to the PDP
Access Control Vestibule - ANSWER A room that controls the movement of people
who go through it, usually at the entrance to a building
Honeypot, Honeynet, Honeyfile, Honeytoken - ANSWER A Fake network, system,
token, etc to attract and trap threat actors
Key Escrow - ANSWER Someone else holds your private keys
Key Stretching - ANSWER Make a weak key stronger by performing multiple processes
with the same key, encrypting multiple times, hashing multiple times etc.
Out-Of-Band Key Exchange - ANSWER Transfer an encryption key OFF of the internet,
over the phone, in person, etc
In-Band Key Exchange - ANSWER Exchanging encryption keys over the network, using
encryption or something else
2
, Trusted Platform Module (TPM) - ANSWER Device that contains cryptographic
hardware, includes key backup, cryptographic accelerators, etc/
Secret Enclave - ANSWER Protected area for encryption secrets
Attributes of Threat Actors (List 4) - ANSWER Internal/External,
Level of Sophistication/Capability,
Resources,
Motivation
Watering Hole Attack - ANSWER Infect a 3rd party site, network, tool, etc with
malware and wait for target to arrive
Memory Injection - ANSWER Malware injects itself into the memory of an already
running process
DLL Injection - ANSWER Malware injects a path to a malicious DLL (Dynamic Link
Library) Into existing windows process, one form of Memory Injection
Buffer Overflows - ANSWER Overwriting a buffer of memory to change something in
another separate memory area
XSS (Cross-Site Scripting) Attack - ANSWER An attack where a threat actor injects code
into a website to make a request to a third party using that user's authentication information
Directory Traversal - ANSWER Allows applications to access data outside of their own
folder using ../../..
Worm - ANSWER Malware that self-replicates through the network, not requiring
human interaction
3
Managerial/Administrative, Operational, Physical
Security Control Types (List All 6) - ANSWER Preventive,
Deterrent,
Detective,
Corrective,
Compensating,
Directive
CIA Triad - ANSWER Confidentiality, Integrity, Availability
AAA Framework - ANSWER Authentication, Authorization,
Accounting
Gap Analysis - ANSWER Analyzing the gap between the current security posture and
the goal security posture of the organization
Zero Trust - ANSWER A wholistic system that covers every device, process, and person,
requiring verification for everything, nothing is inherently trusted
Planes of Operation (List Both) - ANSWER Data Plane and Control Plane
1
,Policy Decision Point (PDP) - ANSWER Entity which receives untrusted requests, made
up of a Policy Engine and Policy Administrator
Policy Engine - ANSWER Evaluates access decision based on policy and other
information, grants, denies, or revokes access
Policy Administrator - ANSWER Generates Access Tokens or credentials,
Communicates with the Policy Enforcement Point (PEP)
Policy Enforcement Point (PEP) - ANSWER Endpoint which receives untrusted requests
and sends them to the PDP
Access Control Vestibule - ANSWER A room that controls the movement of people
who go through it, usually at the entrance to a building
Honeypot, Honeynet, Honeyfile, Honeytoken - ANSWER A Fake network, system,
token, etc to attract and trap threat actors
Key Escrow - ANSWER Someone else holds your private keys
Key Stretching - ANSWER Make a weak key stronger by performing multiple processes
with the same key, encrypting multiple times, hashing multiple times etc.
Out-Of-Band Key Exchange - ANSWER Transfer an encryption key OFF of the internet,
over the phone, in person, etc
In-Band Key Exchange - ANSWER Exchanging encryption keys over the network, using
encryption or something else
2
, Trusted Platform Module (TPM) - ANSWER Device that contains cryptographic
hardware, includes key backup, cryptographic accelerators, etc/
Secret Enclave - ANSWER Protected area for encryption secrets
Attributes of Threat Actors (List 4) - ANSWER Internal/External,
Level of Sophistication/Capability,
Resources,
Motivation
Watering Hole Attack - ANSWER Infect a 3rd party site, network, tool, etc with
malware and wait for target to arrive
Memory Injection - ANSWER Malware injects itself into the memory of an already
running process
DLL Injection - ANSWER Malware injects a path to a malicious DLL (Dynamic Link
Library) Into existing windows process, one form of Memory Injection
Buffer Overflows - ANSWER Overwriting a buffer of memory to change something in
another separate memory area
XSS (Cross-Site Scripting) Attack - ANSWER An attack where a threat actor injects code
into a website to make a request to a third party using that user's authentication information
Directory Traversal - ANSWER Allows applications to access data outside of their own
folder using ../../..
Worm - ANSWER Malware that self-replicates through the network, not requiring
human interaction
3
