Acronyms 1 Flashcards

Question

What does Bypass Access refer to?

Answer 1

Circumventing security controls ## Footnote Bypass Access can lead to security vulnerabilities if not managed properly.

Answer 2

German framework for evaluating cloud security ## Footnote C5 sets standards for cloud service providers regarding data protection.

Answer 3

Issues digital certificates for encryption ## Footnote CAs play a critical role in establishing secure communications over the internet.

Answer 4

Approves or rejects proposed IT changes ## Footnote CAB ensures that changes are managed and aligned with business objectives.

Answer 5

Completely Automated Public Turing Test to Tell Computers and Humans Apart ## Footnote CAPTCHA helps distinguish between human users and automated bots.

Answer 6

A mode of encryption ## Footnote CBC encrypts data in blocks, providing enhanced security.

Answer 7

Training against social engineering ## Footnote CBT techniques can help individuals recognize and resist manipulation tactics.

Answer 8

Standard for certifying IT products' security ## Footnote CC provides a framework for evaluating security features in IT products.

Answer 9

Rights over personal data to California consumers ## Footnote CCPA aims to enhance privacy rights and consumer protection.

Answer 10

Distributes content to minimize latency ## Footnote CDNs improve the speed and reliability of content delivery to users.

Answer 11

Real-time backup solution ## Footnote CDP allows users to restore data to any point in time.

Answer 12

Head of the organization ## Footnote The CEO is responsible for making major corporate decisions.

Answer 13

Manages cybersecurity incidents ## Footnote CERTs provide critical incident response and recovery services.

Answer 14

Cybersecurity risk management ## Footnote CFS helps organizations assess their cybersecurity posture.

Answer 15

Web servers to run applications ## Footnote CGI enables dynamic content generation on web pages.

Answer 16

Standard for IT management ## Footnote CIM provides a unified structure for managing IT resources.

Answer 17

Oversees IT strategy ## Footnote The CIO aligns technology initiatives with business goals.

Answer 18

Response to cybersecurity incidents ## Footnote CIR includes planning and executing responses to security breaches.

Answer 19

Cybersecurity best practices and standards ## Footnote CIS offers guidelines to improve cybersecurity measures.

Answer 20

Leads cybersecurity strategy ## Footnote The CISO is responsible for protecting an organization's information assets.

Answer 21

Sensitive law enforcement data ## Footnote CJIS establishes policies for managing criminal justice information.

Answer 22

Manages configuration of IT assets ## Footnote CM ensures systems are properly configured and maintained.

Answer 23

Repository of IT assets ## Footnote CMDBs help organizations track and manage their IT resources.

Answer 24

DoD-required framework for contractor cybersecurity ## Footnote CMMC ensures that defense contractors meet cybersecurity requirements.

Answer 25

Manages website content ## Footnote CMS platforms allow users to create, edit, and publish digital content.

Answer 26

Prepares for operational disruptions ## Footnote COs ensure that critical functions can continue during crises.

Answer 27

Identifying platforms ## Footnote CPE provides a standardized naming convention for IT products.

Answer 28

Organization's ability to recover from cyber events ## Footnote CR focuses on maintaining operations despite security incidents.

Answer 29

Manages customer data ## Footnote CRM systems help businesses improve customer interactions and satisfaction.

Answer 30

Responds to security incidents ## Footnote CSIRTs coordinate the response to cybersecurity threats.

Answer 31

Application for digital certificate ## Footnote CSRs are used to request a digital certificate from a CA.

Answer 32

Security competition for skill-building ## Footnote CTF events challenge participants to solve security-related tasks.

Answer 33

Data to understand and prevent threats ## Footnote CTI helps organizations anticipate and respond to cyber threats.

Answer 34

Facilities housing computer systems ## Footnote DCEs are critical for hosting IT infrastructure.

Answer 35

Overloads a system with traffic ## Footnote DDoS attacks aim to disrupt services by overwhelming resources.

Answer 36

U.S. government agency for security ## Footnote DHS is responsible for protecting the nation from various threats.

Answer 37

U.S. military standard ## Footnote DIACAP outlines requirements for securing military information systems.

Answer 38

Prevents unauthorized data transfer ## Footnote DLP solutions help organizations protect sensitive information from breaches.

Answer 39

Network area that connects to public internet ## Footnote DMZs provide an additional layer of security for internal networks.

Answer 40

Translates domain names into IP addresses ## Footnote DNS is essential for navigating the internet.

Answer 41

Adds security to DNS ## Footnote DNSSEC helps prevent certain types of attacks on DNS.

Answer 42

Attack that overwhelms a system ## Footnote DoS attacks seek to make a service unavailable to users.

Answer 43

Security of personal data ## Footnote DP is critical for maintaining privacy and compliance with regulations.

Answer 44

Ensures data privacy compliance ## Footnote DPOs oversee data protection strategies in organizations.

Answer 45

Processes for restoring critical systems ## Footnote DR plans outline steps to recover IT infrastructure after a disaster.

Answer 46

Restores systems after a disaster ## Footnote DRPs detail procedures for recovering from significant disruptions.

Answer 47

Assists in decision-making ## Footnote DSS provides analytical tools to support business decisions.

Answer 48

Identifies external threats ## Footnote EASM helps organizations understand and mitigate risks from external sources.

Answer 49

Cryptographic algorithm used for secure communication ## Footnote Elliptic Curve algorithms provide high security with smaller keys.

Answer 50

Monitors end devices for threats ## Footnote EDR solutions provide visibility and response capabilities for endpoints.

Answer 51

EU electronic authentication ## Footnote eIDAS establishes standards for secure electronic transactions.

Answer 52

Mobile device policies ## Footnote EMM solutions ensure security and compliance for mobile devices.

Answer 53

Manages security on an enterprise scale ## Footnote ESM frameworks integrate security across all organizational levels.

Answer 54

Encryption for IP traffic ## Footnote ESP is part of the IPsec protocol suite, enhancing data confidentiality.

Answer 55

U.S. government cloud security ## Footnote FEDRAMP standardizes security assessments for cloud services used by the government.

Answer 56

Monitors files for unauthorized changes ## Footnote FIM helps detect potential security breaches by tracking file alterations.

Answer 57

U.S. security regulation ## Footnote FISMA mandates security standards for federal agencies and contractors.

Answer 58

Transfers files over a network ## Footnote FTP is commonly used for uploading and downloading files.

Answer 59

Strategy to influence perception ## Footnote FUD tactics create apprehension about certain technologies or products.

Answer 60

Filters network traffic for security ## Footnote Firewalls monitor and control incoming and outgoing network traffic.

Answer 61

Software ready for public release ## Footnote GA indicates that a product is stable and available for all users.

Answer 62

Government-specific cloud environment ## Footnote GCCs are designed to meet the unique needs of government entities.

Answer 63

EU data privacy regulation ## Footnote GDPR protects personal data and privacy of EU citizens.

Answer 64

Requires financial institutions to protect customer financial information ## Footnote GLBA mandates that financial institutions ensure the confidentiality of customer data.

Answer 65

Framework for managing governance, risk, and regulatory compliance ## Footnote GRC ensures that organizations meet legal and regulatory requirements.

Answer 66

Continuous system operation ## Footnote HA solutions minimize downtime and maintain service availability.

Answer 67

Assesses vendor security for higher education ## Footnote HECVAT helps institutions evaluate the security posture of third-party vendors.

Answer 68

Individual hosts ## Footnote HIDS detect suspicious activity on specific devices within a network.

Answer 69

Privacy of health information ## Footnote HIPAA sets standards for the protection of sensitive patient data.

Answer 70

Protects individual hosts ## Footnote HIPS actively blocks potential threats on host systems.

Answer 71

Expands HIPAA protections for health information ## Footnote HITECH encourages the adoption of health information technology.

Answer 72

Manages healthcare information security and compliance ## Footnote HITRUST provides a framework for managing data protection in healthcare.

Answer 73

Data integrity and authenticity ## Footnote HMAC combines a cryptographic hash function with a secret key.

Answer 74

Manages employee-related data ## Footnote HRM encompasses recruitment, training, and employee relations.

Answer 75

Standard language for web pages ## Footnote HTML is the backbone of web content structure.

Answer 76

A protocol for transmitting data over the web ## Footnote HTTP is the foundation of data communication on the World Wide Web.

Answer 77

An encrypted version of HTTP for secure data transmission ## Footnote HTTPS protects the integrity and confidentiality of data between users and websites.

Answer 78

Manages user access rights ## Footnote IAM ensures that the right individuals have access to the right resources.

Answer 79

Internet diagnostics ## Footnote ICMP is used for error reporting and operational queries.

Answer 80

Detects suspicious network activity ## Footnote IDS systems alert administrators to potential security breaches.

Answer 81

Framework for data management ## Footnote IG ensures that data is managed properly and complies with regulations.

Answer 82

Real-time text communication ## Footnote IM allows users to communicate instantly over the internet.

Answer 83

Protects information from threats ## Footnote INFOSEC encompasses measures to safeguard data from unauthorized access.

Answer 84

Evidence of a potential security breach ## Footnote IoCs help in identifying and responding to security incidents.

Answer 85

Networked devices communicating over the internet ## Footnote IoT devices collect and exchange data, enhancing connectivity.

Answer 86

Prevents detected threats ## Footnote IPS actively blocks malicious activity on the network.

Answer 87

Secures internet protocol communication ## Footnote IPSec provides confidentiality, integrity, and authentication for IP packets.

Answer 88

Actions to manage and resolve incidents ## Footnote IR involves preparing for, detecting, and responding to security breaches.

Answer 89

Real-time text messaging ## Footnote IRC is a protocol for live communication over the internet.

Answer 90

Procedures for detecting and responding to cybersecurity incidents ## Footnote IRPs outline the steps to take during a security breach.

Answer 91

Organization’s information security program ## Footnote The ISO is responsible for protecting the organization's information assets.

Answer 92

Develops standards ## Footnote ISO establishes international standards across various industries.

Answer 93

Provides internet access ## Footnote ISPs connect users to the internet and offer related services.

Answer 94

Systems for managing and processing information in organizations ## Footnote IT includes hardware, software, and networks used for information processing.

Answer 95

Framework for IT service management ## Footnote ITIL provides best practices for delivering IT services effectively.

Answer 96

Manages delivery of IT services ## Footnote ITSM focuses on aligning IT services with business needs.

Answer 97

Random value used in encryption ## Footnote IVs ensure that the same plaintext encrypts to different ciphertexts.

Answer 98

Minimizes resource waste by efficient delivery ## Footnote JIT practices optimize production and inventory management.

Answer 99

Manages encryption keys ## Footnote KMS ensures that encryption keys are securely generated and stored.

Answer 100

Measures success ## Footnote KPIs help organizations evaluate their performance against goals.

Answer 101

Identity verification process ## Footnote KYC is essential for preventing fraud and ensuring compliance.

Answer 102

Connects computers in a local area ## Footnote LANs enable devices within a limited area to communicate and share resources.

Answer 103

Directory information ## Footnote LDAP is used for accessing and maintaining distributed directory information services.

Answer 104

Vulnerability allowing unauthorized file access ## Footnote LFI can lead to exposure of sensitive files on a server.

Answer 105

Protocol separating network addresses ## Footnote LISP enhances routing efficiency and scalability.

Answer 106

AI trained on vast data for natural language understanding ## Footnote LLMs are used in applications such as chatbots and translation services.

Answer 107

Subscription service for Microsoft Office and productivity tools ## Footnote M365 includes applications like Word, Excel, and Teams.

Answer 108

A cybersecurity service that provides threat monitoring, detection, and response capabilities for organizations ## Footnote MDR combines technology and human expertise to enhance security.

Answer 109

User identity with multiple factors ## Footnote MFA requires more than one method of authentication to enhance security.

Answer 110

Combines printer, scanner, copier ## Footnote MFDs streamline document handling in offices.

Answer 111

Eavesdropping attack on a communication ## Footnote MITM attacks intercept and potentially alter communications between parties.

Answer 112

AI that enables systems to learn and adapt from data ## Footnote ML algorithms improve their performance as more data is available.

Answer 113

Manages IT infrastructure and services for clients ## Footnote MSPs offer outsourced IT services, including support and maintenance.

Answer 114

Provides outsourced security ## Footnote MSSPs help organizations protect against cybersecurity threats.

Answer 115

Controls network access based on policies ## Footnote NAC ensures that only authorized devices can connect to the network.

Answer 116

Data storage connected to a network ## Footnote NAS devices provide centralized data storage and sharing for multiple users.

Answer 117

Translates IP addresses for routing ## Footnote NAT allows multiple devices to share a single public IP address.

Answer 118

Detects unusual network activity ## Footnote NBAD identifies deviations from normal network behavior to spot potential threats.

Answer 119

Protects confidential information ## Footnote NDAs establish legal obligations to maintain secrecy.

Answer 120

Network for threats ## Footnote NDR solutions analyze network traffic to identify and respond to security threats.

Answer 121

Short-range communication technology ## Footnote NFC is commonly used for contactless payments and data exchange.

Answer 122

Detects network attacks ## Footnote NIDS monitors network traffic for suspicious activity.

Answer 123

Sets cybersecurity standards ## Footnote NIST develops guidelines and best practices for information security.

Answer 124

Monitors network health ## Footnote NOCs are responsible for managing and maintaining network performance.

Answer 125

Network services ## Footnote NSPs provide internet connectivity and related services to organizations.

Answer 126

Clocks over the internet ## Footnote NTP ensures that devices maintain accurate time across networks.

Answer 127

Checks certificate validity ## Footnote OCSP provides real-time validation of digital certificates.

Answer 128

Hardware/software ## Footnote OEMs manufacture products that are rebranded by other companies.

Answer 129

Policy engine for enforcing security ## Footnote OPA allows organizations to define and enforce policies across their services.

Answer 130

Manages risks to operations ## Footnote ORM identifies and mitigates risks that could impact business operations.

Answer 131

Gathering publicly available information for analysis ## Footnote OSINT is used in cybersecurity and competitive analysis.

Answer 132

Web security ## Footnote OWASP provides resources and tools to improve web application security.

Answer 133

Controls access to sensitive systems ## Footnote PAM solutions help manage and monitor privileged accounts.

Answer 134

Traffic based on policies ## Footnote PBR allows network administrators to make routing decisions based on criteria beyond destination IP.

Answer 135

Protects payment data ## Footnote PCI DSS sets requirements for organizations that handle credit card information.

Answer 136

Secure key exchange ## Footnote PFS guarantees that session keys are not compromised even if the private key is.

Answer 137

Encrypts and decrypts emails ## Footnote PGP provides cryptographic privacy and authentication for communications.

Answer 138

Sensitive data about individuals ## Footnote PII includes information that can be used to identify an individual.

Answer 139

Encrypts data with a public key ## Footnote PKE enables secure communication without sharing private keys.

Answer 140

Digital keys and certificates ## Footnote PKI provides the framework for secure communications across networks.

Answer 141

Demonstrates feasibility of a concept ## Footnote PoCs are used to validate ideas before full-scale development.

Answer 142

Product incidents ## Footnote PSIRTs address security vulnerabilities and incidents related to products.

Answer 143

Simulated cyberattack for testing defenses ## Footnote PT identifies vulnerabilities by attempting to exploit them.

Answer 144

Software that may pose a security risk ## Footnote PUPs can affect system performance or privacy.

Answer 145

Identifies and evaluates risks ## Footnote RA evaluates potential risks to inform decision-making.

Answer 146

Access by roles ## Footnote RBAC assigns permissions based on user roles within an organization.

Answer 147

List of known spam sources ## Footnote RBLs are used to block known spam and malicious IP addresses.

Answer 148

Exploits vulnerabilities to run code remotely ## Footnote RCE allows attackers to execute arbitrary commands on a system from a remote location.

Answer 149

Connects to remote computers ## Footnote RDP allows users to access and control desktops remotely.

Answer 150

Security investment returns ## Footnote ROSI evaluates the effectiveness and financial benefits of security measures.

Answer 151

Monitors patient health remotely ## Footnote RPM technologies enable healthcare providers to track patient health outside of clinical settings.

Answer 152

Targeted time for system recovery ## Footnote RTO defines the maximum acceptable downtime after an incident.

Answer 153

Cloud-based software delivery ## Footnote SaaS allows users to access software applications over the internet.

Answer 154

Manages software licenses and assets ## Footnote SAM ensures compliance and optimizes software usage within organizations.

Answer 155

Manages user authentication ## Footnote SAML enables single sign-on (SSO) for web applications.

Answer 156

Vulnerability management ## Footnote SCAP provides a standardized approach to managing security compliance.

Answer 157

Security events ## Footnote SIEM systems provide real-time analysis of security alerts generated by applications.

Answer 158

Identifies users in a mobile network ## Footnote SIM cards store user data and enable mobile connectivity.

Answer 159

Sends email messages ## Footnote SMTP is the standard protocol for sending emails across the internet.

Answer 160

Monitors and manages security ## Footnote SOCs are responsible for detecting and responding to security incidents.

Answer 161

An organization’s security and privacy controls ## Footnote SOC reports (SOC 1, SOC 2, SOC 3) evaluate controls relevant to financial reporting and data security.

Answer 162

U.S. regulation for financial reporting and auditing ## Footnote SOX mandates strict reforms to enhance corporate governance.

Answer 163

Email spoofing ## Footnote SPF allows domain owners to specify which mail servers are permitted to send email on behalf of their domain.

Answer 164

Attack injecting SQL code into a query ## Footnote SQLi can allow attackers to manipulate databases and access sensitive data.

Answer 165

Protocol for secure remote access ## Footnote SSH encrypts connections to provide secure command-line access.

Answer 166

Data for secure internet connections ## Footnote SSL has been succeeded by TLS but is still often referred to in legacy systems.

Answer 167

Authenticates users for multiple applications ## Footnote SSO allows users to log in once and gain access to various systems without re-authenticating.

Answer 168

Threat intel sharing ## Footnote STIX provides a common format for representing and sharing threat information.

Answer 169

Protects users from web-based threats ## Footnote SWGs filter unwanted software/malware from user-initiated web traffic.

Answer 170

Controls network access ## Footnote TACACS+ provides centralized authentication for users accessing networked resources.

Answer 171

Verifies identity using two factors ## Footnote TFA is a security measure similar to 2FA that requires two forms of verification.

Answer 172

European information security standard for automotive suppliers ## Footnote TISAX provides a framework for assessing information security in the automotive industry.

Answer 173

Sharing sensitive information ## Footnote TLP defines how to communicate the sensitivity of shared information.

Answer 174

Encrypts data over networks, successor to SSL ## Footnote TLS provides secure communication over a computer network.

Answer 175

Attacker behavior patterns ## Footnote TTPs provide insights into how attackers operate and can inform defense strategies.

Answer 176

Analyzes behaviors to detect threats ## Footnote UEBA helps identify anomalies in user and entity activities that may indicate security breaches.

Answer 177

Devices for data transfer ## Footnote USB is a standard for connecting peripherals and transferring data.

Answer 178

Consolidates multiple security functions ## Footnote UTM solutions provide a comprehensive approach to network security.

Answer 179

Identifies information in computer systems ## Footnote UUIDs are used to uniquely identify objects in software applications.

Answer 180

Identifies and evaluates security vulnerabilities ## Footnote VA processes help organizations understand their security weaknesses.

Answer 181

Comprehensive vulnerability testing ## Footnote VAPT combines both assessment and testing to evaluate security postures.

Answer 182

Outsourced CISO for cybersecurity leadership ## Footnote vCISOs offer strategic security guidance without being full-time employees.

Answer 183

Separates networks virtually within a LAN ## Footnote VLANs enhance network segmentation and security.

Answer 184

Internet connection for secure access ## Footnote VPNs create secure tunnels for data transmission over the internet.

Answer 185

Manages third-party risk ## Footnote VRM processes evaluate and mitigate risks associated with vendors.

Answer 186

Backups of computer files ## Footnote VSS allows users to recover previous versions of files.

Answer 187

Traffic to protect web applications ## Footnote WAFs monitor and filter HTTP traffic to prevent attacks.

Answer 188

Connects large geographic areas ## Footnote WANs enable connectivity across cities, countries, or continents.

Answer 189

Early Wi-Fi security protocol, now outdated ## Footnote WEP was the first security protocol for wireless networks but is no longer considered secure.

Answer 190

Working remotely outside a formal office ## Footnote WFH arrangements have become more common due to technological advancements.

Answer 191

Technology for wireless networking, connecting devices to the internet ## Footnote WiFi technology allows devices to connect to networks without physical cables.

Answer 192

Security standard for Wi-Fi networks ## Footnote WPA is designed to secure wireless networks against unauthorized access.

Answer 193

Latest standard for Wi-Fi security ## Footnote WPA3 enhances security features and provides better protection against brute-force attacks.

Answer 194

Multiple security data sources ## Footnote XDR provides a more integrated approach to threat detection and response.

Answer 195

Standard for data exchange ## Footnote XML is used to encode documents in a format that is both human-readable and machine-readable.

Answer 196

Attack injecting malicious scripts into websites ## Footnote XSS vulnerabilities allow attackers to execute scripts in the context of a user's browser.

Answer 197

Tool for identifying malware patterns ## Footnote YARA helps security researchers categorize and identify malware samples.

Answer 198

Compresses files for storage or transfer ## Footnote ZIP is a common format for file compression and archiving.

Answer 199

Security model with no implicit trust ## Footnote ZTA requires verification for every user and device attempting to access resources.

Acronyms 1 Flashcards

(223 cards)