19A: Employ Technical Controls

Question 1

Process of making a host or app configuration secure by reducing its attack surface, through running only necessary services, installing monitoring software to protect against malware and intrusions, and establishing a maintenance schedule to ensure the system is patched to be secure against software exploits.

Answer 1

hardening

Question 2

This is the process of thoroughly and completely removing data from a storage medium so that file remnants cannot be recovered.

Answer 2

sanitization

Question 3

Also referred to as encoding, substitutes special characters in HTML markup with representations that are called entities.

Answer 3

escaping

Question 4

A specific type of remediation; this is the concept of resolving a finding through changing how it is used or implemented.

Answer 4

process-level remediation

Question 5

Identifying, testing, and deploying OS and application updates. Patches are often classified as critical, security-critical, recommended, and optional.

Answer 5

patch management

Question 6

The process of periodically generating and implementing new access keys to a server/service.

Answer 6

key rotation

Question 7

The practice of issuing, updating, and revoking digital certificates.

Answer 7

certificate management

Question 8

The process of assigning a specific certificate to a particular element to avoid man-in-the-middle-attacks.

Answer 8

certificate pinning

Question 9

A platform that controls passwords, key pairs and other sensitive information that should be stored securely.

Answer 9

secret management solution

Question 10

The process of dividing the system infrastructure into different physical or virtual subdivisions.

Answer 10

network segmentation