Course 1 Flashcards

1
Q

Adversarial artificial intelligence (AI)

A

A technique that manipulates artificial intelligence (AI) and machine learning (ML) technology to conduct attacks more efficiently

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Antivirus software

A

A software program used to prevent, detect, and eliminate malware and viruses

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Asset

A

An item perceived as having value to an organization

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Authentication

A

The process of verifying who someone is

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Availability

A

The idea that data is accessible to those who are authorized to access it

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Business Email Compromise (BEC)

A

A type of phishing attack where a threat actor impersonates a known source to obtain financial advantage

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Computer virus

A

Malicious code written to interfere with computer operations and cause damage to data and software

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Confidentiality

A

Only authorized users can access specific assets or data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Confidentiality, integrity, availability (CIA) triad

A

A model that helps inform how organizations consider risk when setting up systems and security policies

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Cryptographic attack

A

An attack that affects secure forms of communication between a sender and intended recipient

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Cybersecurity (or security)

A

The practice of ensuring confidentiality, integrity, and availability of information by protecting networks, devices, people, and data from unauthorized access or criminal exploitation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Database

A

An organized collection of information or data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Data point

A

A specific piece of information

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Hacker

A

Any person or group who uses computers to gain unauthorized access to data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Hacktivist

A

A person who uses hacking to achieve a political goal

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Health Insurance Portability and Accountability Act (HIPAA)

A

A U.S. federal law established to protect patients’ health information

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Integrity

A

The idea that the data is correct, authentic, and reliable

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Internal threat

A

A current or former employee, external vendor, or trusted partner who poses a security risk

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Intrusion detection system (IDS)

A

An application that monitors system activity and alerts on possible intrusions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Linux

A

An open-source operating system

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Log

A

A record of events that occur within an organization’s systems

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Malware

A

Software designed to harm devices or networks

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

National Institute of Standards and Technology (NIST) Cyber Security Framework (CSF)

A

A voluntary framework that consists of standards, guidelines, and best practices to manage cybersecurity risk

24
Q

Network protocol analyzer (packet sniffer)

A

A tool designed to capture and analyze data traffic within a network

25
Q

Network security

A

The practice of keeping an organization’s network infrastructure secure from unauthorized access

26
Q

Open Web Application Security Project (OWASP)

A

A non-profit organization focused on improving software security

27
Q

Order of volatility

A

A sequence outlining the order of data that must be preserved from first to last

28
Q

Password attack

A

An attempt to access password secured devices, systems, networks, or data

29
Q

Personally identifiable information (PII)

A

Any information used to infer an individual’s identity

30
Q

Phishing

A

The use of digital communications to trick people into revealing sensitive data or deploying malicious software

31
Q

Physical attack

A

A security incident that affects not only digital but also physical environments where the incident is deployed

32
Q

Physical social engineering

A

An attack in which a threat actor impersonates an employee, customer, or vendor to obtain unauthorized access to a physical location

33
Q

Privacy protection

A

The act of safeguarding personal information from unauthorized use

34
Q

Programming

A

A process that can be used to create a specific set of instructions for a computer to execute tasks

35
Q

Protected health information (PHI)

A

Information that relates to the past, present, or future physical or mental health or condition of an individual

36
Q

Protecting and preserving evidence

A

The process of properly working with fragile and volatile digital evidence

37
Q

Security architecture

A

A type of security design composed of multiple components, such as tools and processes, that are used to protect an organization from risks and external threats

38
Q

Security controls

A

Safeguards designed to reduce specific security risks

39
Q

Security ethics

A

Guidelines for making appropriate decisions as a security professional

40
Q

Security frameworks

A

Guidelines used for building plans to help mitigate risk and threats to data and privacy

41
Q

Security governance

A

Practices that help support, define, and direct security efforts of an organization

42
Q

Security information and event management (SIEM)

A

An application that collects and analyzes log data to monitor critical activities in an organization

43
Q

Sensitive personally identifiable information (SPII)

A

A specific type of PII that falls under stricter handling guidelines

44
Q

Social engineering

A

A manipulation technique that exploits human error to gain private information, access, or valuables

45
Q

Social media phishing

A

A type of attack where a threat actor collects detailed information about their target on social media sites before initiating the attack

46
Q

Spear phishing

A

A malicious email attack targeting a specific user or group of users, appearing to originate from a trusted source

47
Q

SQL (Structured Query Language)

A

A programming language used to create, interact with, and request information from a database

48
Q

Supply-chain attack

A

An attack that targets systems, applications, hardware, and/or software to locate a vulnerability where malware can be deployed

49
Q

Technical skills

A

Skills that require knowledge of specific tools, procedures, and policies

50
Q

Threat

A

Any circumstance or event that can negatively impact assets

51
Q

Threat actor

A

Any person or group who presents a security risk

52
Q

Transferable skills

A

Skills from other areas that can apply to different careers

53
Q

USB baiting

A

An attack in which a threat actor strategically leaves a malware USB stick for an employee to find and install to unknowingly infect a network

54
Q

Virus

A

refer to “computer virus”

55
Q

Vishing

A

The exploitation of electronic voice communication to obtain sensitive information or to impersonate a known source

56
Q

Watering hole attack

A

A type of attack when a threat actor compromises a website frequently visited by a specific group of users