Brainscape's Knowledge GenomeTM


Top Flashcards (Certified)
All Flashcards

Cybersecurity > Foundations Of Cybersecurity > Flashcards

Foundations Of Cybersecurity Flashcards

(93 cards)

Start Studying
1
Q

Cybersecurity

A

The practice of ensuring confidentiality, integrity and availability of information by protecting networks, devices, people, and data from unauthorized access or criminal exploitation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Threat Actor

A

Any person or group who presents a security risk

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Playbook

A

A list of how to go through a certain detection, and what the analyst needs to look at in order to investigate those incidents

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Compliance

A

The process of adhering to internal standards and external regulations and enables organizations to avoid fines and security breaches

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Security Frameworks

A

Guidelines used for building plans to help mitigate risks and threats to data and privacy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Security Controls

A

Safeguards designed to reduce specific security risks. They are used with security frameworks to establish a strong security posture

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Security Posture

A

An organizations ability to manage its defense of critical assets and data and react to change.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Internal Threat

A

A current or former employee, an external vendor or a trusted partner who poses a security risk.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Network Security

A

The practice of keeping an organizations network infrastructure secure from unauthorized access.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Cloud Security

A

The process of ensuring that assets stored in the cloud are properly configured or set up correctly, and access to those assets is limited to authorized users.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Cloud

A

A network made up of a collection of servers or computers that store resources and data in remote physical locations known as data centers that can be accessed via the internet.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Programming

A

A process that can be used to create a specific set of instructions for a computer to execute tasks.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Transferable Skills

A

Communication, collaboration, analysis and problem solving

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Technical Skills

A

Programming languages, Security Information and Event Management (SIEM) tools, and computer forensics

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Security Information and Event Management (SIEM) Tools

A

Tools which collect and analyze log data or records of events such as unusual login behavior and support analysts ability to monitor critical activities in an organization.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Intrusion Detection Systems (IDSs)

A

Used to monitor system activity and alerts for possible intrusions.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Personally Identifiable Information (PII)

A

Any information used to infer an individuals identity. (Ex- full name, D.O.B., address, phone number, email, IP)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Sensitive Personally Identifiable Information (SPII)

A

A specific type of PII that falls under stricter handling guidelines. (Ex- SSN, medical or financial information, biometric data)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Computer Virus

A

Malicious code written to interfere with computer operations and cause damage to data and software.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Malware

A

Software designed to harm devices or network.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Social Engineering

A

A manipulation technique that exploits human error to gain private information, access, or valuables.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Phishing

A

The use of digital communications to trick people into revealing sensitive data or deploying malicious software.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

CSIRTs

A

Computer Security Incident Response Teams

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Business Email Compromise (BEC)

A

A threat actor sends an email message that seems to be from a known source to make a seemingly legitimate request for information in order to obtain a financial advantage.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Spear Phishing
A malicious email attack that targets a specific user or group of users.
26
Whaling
A form of spear phishing. Threat actors target company executives to gain access to sensitive data.
27
Vishing
The exploitation of electronic voice communication to obtain sensitive information or to impersonate a known source.
28
Smishing
The use of text messages to trick users in order to obtain sensitive information or to impersonate a known source.
29
Worms
Malware that can duplicate and spread itself across system on its own.
30
Ransomware
A malicious attack where threat actors encrypt an organization's data and demand payment to restore access.
31
Spyware
Malware that's used to gather and sell information without consent.
32
Social Media Phishing
A threat actor collects detailed information about their target from social media sites.
33
Watering Hole Attack
A threat actor attacks a website frequently visited by a specific group of users.
34
USB Baiting
A threat actor strategically leaves a malware USB stick for an employee to find and install to unknowingly infect a network.
35
Physical Social Engineering
A threat actor impersonates an employee, customer or vendor to obtain unauthorized access to a physical location.
36
Reasons Social Engineering Is Effective
Authority, intimidation, consensus/ social proof, scarcity, familiarity, trust or urgency
37
CISSP
Certified Information Systems Security Professional
38
Name The 8 CISSP Security Domains
Security and Risk Management, Asset Security, Security Architecture and Engineering, Communications and Network Security, Identity and Access Management, Security Assessment and Testing, Security Operations, Software Development Security
39
Security and Risk Management
Defines security goals and objectives, risk mitigation, compliance, business continuity, and the law.
40
Asset Security
Secures digital and physical assets. Related to the storage, maintenance, retention, and destruction of data.
41
Security Architecture and Engineering
Optimizes data security by ensuring effective tools, systems, and processes are in place. Ex- firewall
42
Communication and Network Security
Manage and secure physical networks and wireless communications.
43
Identity and Access Management
Keeps data secure by ensuring users follow established policies to control and manage physical assets, like office spaces and logical assets, such as networks and applications. Ex- validating employees or setting up keycard access.
44
Security Assessment and Testing
Conducting security control testing, collecting and analyzing data, and conducting security audits to monitor for risks, threats, and vulnerabilities.
45
Security Operations
Conducting investigations and implementing preventative measures. Ex- unknown device connects to the network
46
Software Development Security
Uses secure coding practices, which are a set of recommended guidelines that are used to create secure applications and services.
47
Password Attack
An attempt to access password secured devices, systems, networks, or data. Ex- Brute Force or Rainbow Table
48
Physical Attack
A security incident that affects not only digital but also physical environments where the incident is deployed.
49
Adversarial Artifical Intelligence
A technique that manipulates artificial intelligence and machine learning technology to conduct attacks more efficiently.
50
Supply Chain Attack
Targets systems, applications, hardware, and/or software to locate a vulnerability where malware can be deployed.
51
Cryptographic Attack
Affects secure forms of communication between a sender and intended recipient.
52
Advanced Persistent Threats (APTs)
Have significant expertise accessing an organizations network without authorization. Tend to research their targets in advance and can remain undetected for an extended period of time.
53
Insider Threats
Abuse of their authorized access to obtain data that may harm an organization.
54
Hacktivists
Threat actors that are driven by a political agenda.
55
Hacker
Any person who uses a computer to gain access to computer systems, networks, or data.
56
Authorized Hackers (Ethical Hackers)
Follow a code of ethics and adhere to the law to conduct organizational risk evaluations.
57
Semi-Authorized Hackers (Researchers)
Search for vulnerabilities but don't take advantage of the vulnerabilities they find.
58
Unauthorized Hackers (Unethical Hackers)
Malicious threat actors who don't follow or respect the law.
59
Security Life Cycle
A constantly evolving set of policies and standards that define how an organization manages risks, follows established guidelines and meets regulatory compliance laws
60
Purposes of Security Frameworks
Protecting PII, Securing Financial Information, Identifying Security weaknesses, managing organizational risks, aligning Security with business goals
61
Components of Security Frameworks
Identifying and documenting security goals, setting guidelines to achieve security goals, implementing strong security processes, and monitoring and communicating results
62
General Data Protection Regulation (GDPR)
A data protection law established to grant European citizens more control over their personal data
63
CIA Triad
A foundational model that helps inform how organizations consider risk when setting up systems and security policies
64
Confidentiality
Only authorized users can access specific assets or data
65
Integrity
Data is correct, authentic and reliable
66
Availability
Data is accessible to those who are authorized to access it
67
Asset
An item perceived as having value to an organization
68
NIST
National Institute of Standards and Technology
69
NIST Cybersecurity Framework (CSF)
A voluntary framework that consists of standards, guidelines, and best practices to manage cybersecurity risk (Baseline to manage short and long term risks)
70
Security Ethics
Guidelines for making appropriate decisions as a security professional
71
Ethical Principles In Security
Confidentiality, Privacy Protections, and Laws
72
Privacy Protection
Safeguarding personal information from unauthorized use
73
Log
A record of events that occur within an organizations systems
74
Network Protocol Analyzer (Packet Sniffers)
A tool designed to capture and analyze data traffic within a network
75
Chain of Custody Playbook
The process of documenting evidence possession and control during an incident life cycle. (Who, what, where and why evidence was collected)
76
Protecting and Preserving Evidence Playbook
The process of properly working with fragile and volatile digital evidence
77
Order of Volatility
A sequence outlining the order of data that must be preserved from first to last
78
Volatile Data
Data that may be lost if the device in question powers off
79
Dashboard
A tool used to visually communicate information or data
80
Linux
An open source operating system (publicly available)
81
Structured Query Language (SQL)
A programming language used to create, interact with, and request information from a database
82
Database
An organized collection of information or data
83
Python
Used to perform tasks that are repetitive and time consuming and that require a high level of detail and accuracy
84
Data Point
A specific piece of information
85
Operating System
The interface between computer hardware and the user. Ex- Linux, macOS, Windows
86
Command
An instruction telling the computer to do something
87
Command Line
A text based user interface that uses commands to interact with the computers
88
Web Vulnerability
A unique flaw in a web application that a threat actor could exploit
89
Antivirus Software
A software program used to prevent, detect and eliminate malware and viruses (also called anti malware)
90
Encryption
The process of converting data from a readable format to a cryptographically encoded format
91
Cryptographic Encoding
Converting plaintext into secure ciphertext
92
Plaintext
Unencrypted information
93
Penetration Testing
The act of participating in a simulated attack that helps identify vulnerabilities in systems, networks, websites, applications and processes.

Cybersecurity (3 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions