More Exam questions Flashcards

Question

What is a threat?

Answer 1

A potential event or action that can compromise the security of an asset, exploiting a vulnerability.

Answer 2

Hackers Thieves Hacktivists Competitors and organized crime Terrorists Nation States

Answer 3

Tangible assets are physical components that can be touched, measured, and quantified. Example: Servers, Networking equipment, Storage devices, Workstations and laptops.

Answer 4

Intangible assets are non-physical elements that hold value for an organization, they are often crucial for operations and reputation. Example: Brand reputation, data, software and applications, encryption keys and certificates, etc.

Answer 5

A vulnerability is a weakness in a system that can be exploited, either accidentally or intentionally, to cause harm. This harm can affect assets such as hardware, software, data, reputation, and more.

Answer 6

An attack surface consists of the reachable and exploitable vulnerabilities in a system. Example: Open ports on outward-facing web and other servers, services available inside a firewall, code that processes incoming data.

Answer 7

An attack tree is a branching, hierarchical data structure that represents a set of potential techniques for exploiting security vulnerabilities.

Answer 8

The primary goal of the attack

Answer 9

A program that is inserted into a system, usually covertly, with the intent of compromising the confidentiality, integrity, or availability of the victim’s data, applications, or operating system or otherwise annoying or disrupting the victim.

Answer 10

A worm is a type of malware that attempts to penetrate networks and computer systems. A worm is self-replicating and can spread independently across networks.

Answer 11

It is a piece of malicious code that replicates by attaching itself to another executable file. When the infected file is executed, the virus is also triggered, allowing it to infect other files or perform malicious actions.

Answer 12

A Trojan horse (or simply Trojan) is a type of software that appears to perform a useful function but secretly executes harmful actions. Unlike a virus, which spreads by attaching to other programs, a Trojan is a standalone program that must be installed by the user.

Answer 13

A logic bomb is a piece of malicious code that remains inactive until specific conditions are met.

Answer 14

A botnet is a network of compromised computers (bots or zombies) controlled by an attacker.

Answer 15

A rootkit is a set of tools that enable covert system access while hiding evidence of its presence.

Answer 16

A buffer is a specific memory location used to store data during program execution. Buffer overflow occurs when data exceeds the allocated buffer size, leading to unintended memory overwrites. This can be exploited by attackers to crash a system or execute malicious code.

Answer 17

A digital certificate is a message signed by a Certificate Authority (CA) that binds a subject’s name to their public key.

Answer 18

TLS is a cryptographic protocol that protects data transmission between users and servers. It's key features are authentication, data integrity, and message confidentiality.

Answer 19

HTTPS is an extension of HTTP that ensures secure communication over a network by encrypting data using SSL/TLS protocols. This encryption helps protect sensitive information exchanged between a web browser and a web server, preventing unauthorized access or data interception.

Answer 20

IPSec is a protocol suite designed to secure network communications at the IP layer rather than at the transport layer. It provides a robust mechanism for ensuring data confidentiality, integrity, and authenticity across network transmissions.

Answer 21

A VPN establishes a secure and encrypted digital connection between a user's device and a remote server operated by a VPN provider. By encrypting personal data and masking the user's IP address, VPNs provide privacy, security, and access to geo-restricted content.

Answer 22

SSH is a cryptographic network protocol designed for securely performing network services over an insecure network. It ensures secure remote login, command execution, and file transfers by encrypting communication, protecting confidentiality, and maintaining data integrity.

Answer 23

SFTP is an enhanced version of File Transfer Protocol (FTP) that provides secure file transfer capabilities over an encrypted SSH connection. This prevents vulnerabilities such as Man-in-the-Middle (MITM) attacks and password sniffing.

Answer 24

OAuth 2.0 is an authorization framework that allows third-party applications to securely access a user's resources without exposing login credentials. It is widely used for enabling secure authentication across web services, such as logging into third-party apps using Google, Facebook, or Microsoft accounts.

Answer 25

Access control is the process by which a computer system regulates the interaction between users, programs, or other entities and system resources based on a security policy. It ensures that only authorized users can access certain resources.

Answer 26

Inline and passive sensors

Answer 27

Decoy systems designed to lure attackers away from critical systems.

Answer 28

A firewall is a network security system that monitors and controls incoming and outgoing network traffic based on predetermined security rules.

Answer 29

Any valuable resource that requires protection. These can be tangible, like servers or data centers, or intangible, such as intellectual property.

Answer 30

The value of an asset, often measured in monetary terms (like replacement costs) or by its importance to the organization. This helps prioritize protection efforts based on the asset’s significance.

Answer 31

The potential for loss that arises from the combination of a threat exploiting a vulnerability and the harm it causes.

More Exam questions Flashcards

(55 cards)