Chapter 2: Monitoring and Diagnosing Networks Flashcards
A network segment between two firewalls. One is outward facing, connected to the outside world, the other inward facing, connected to the internal network. Public-facing servers, such as web servers, are often placed in the DMZ.
Demilitarized Zone
A network that functions in the same manner as a honeypot.
Honeynet
A fake system designed to divert attackers from your real systems. It is often replete with logging and tracking to gather evidence.
Honeypot
A broad term that applies to a wide range of systems used to manage information security.
Information Security Management System (ISMS)
A system that monitors the network for possible intrusions and logs that activity.
Intrusion Detection System (IDS)
A system that monitors the network for possible intrusions and logs that activity and then blocks the traffic that is suspected of being an attack.
Intrusion Prevention System (IPS)
Any information that could identify a particular individual.
Personally Identifiable Information (PII)
The entire network, including all security devices, is virtualized.
Software-Defined Network (SDN)
A firewall that not only examines each packet but also remembers the recent previous packets.
Stateful Packet Inspection (SPI)
Specifies the requirements for establishing, implementing, maintaining, and continually improving an information security management system within the context of the organization.
ISO/IEC 27001:2013
Recommends best practices for initiating, implementing, and maintaining information security management systems.
ISO 27002
This an agreement on shared or divided security responsibilities between the customer and cloud provider.
CLD.6.3.1
This control addresses how assets are returned or removed from the cloud when the contract is terminated.
CLD.8.1.5
This control states that the cloud provider must separate the customers’ virtual environment from other customers or outside parties.
CLD.9.5.1
This control states that the customer and the cloud provider both must ensure the virtual machines are hardened.
CLD.9.5.2
It is solely the customer’s responsibility to define and manage administrative operations.
CLD.12.1.5
The cloud provider’s capabilities must enable the customer to monitor their own cloud environment.
CLD.12.4.5
The virtual network environment must be configured so that it at least meets the security policies of the physical environment.
CLD.13.1.4
Defines privacy requirements in a cloud environment-particularly how the customer and cloud provider must protect personally identifiable information (PII).
ISO 27018
Publishes standards for electrical power companies.
North American Electric Reliability Corporation (NERC)
The source for many of the national standards in the United States.
National Institute of Standards and Technology (NIST)
What are the 6 phases of the IT security life cycle?
Phase 1: Initiation Phase 2: Assessment Phase 3: Solution Phase 4: Implementation Phase 5: Operations Phase 6: Closeout
A series of standards that define procedures for implementing electronically secure industrial automation and control systems (IACSs).
ISA/IEC-62443
The standard used by Visa, Mastercard, American Express, and Discover.
Payment Card Industry Data Security Standard (PCI-DSS)
