Security+ Acronyms Flashcards

Question

Vulnerability

Answer 1

Any weakness of a system which could cause a security breach, intentionally or unintentionally Asset value Ease of exploit lesson 2

Answer 2

``` Potential for a vulnerability to be exploited Internal/External Malicious/accidental Threat actor Threat vector ``` lesson 2

Answer 3

likelihood and impact of a threat actor exploiting a vulnerability Risk = vulnerability + threat Risk(likelihood * impact) lesson 2

Answer 4

white hat - attacks performed for good, authorized/planed attacks black hat - attacks performed with malicious intent, unauthorized grey hat - mix of white and black hats, similar to fixing lock by breaking in and then fixing it with a note that it was fixed lesson 2

Answer 5

untrained attackers, usually just using a script found on internet, etc. lesson 2

Answer 6

hacking to prove a point, not necessarily for malicious intent or for gain monetarily lesson 2

Answer 7

Advanced Persistent Threat refers to the ongoing ability of an adversary to compromise network security to obtain and maintain access using a variety of tools and techniques used by State Actors who have nation backing, high amount of resources lesson 2

Answer 8

state or nation backed attackers, usually military/secret services highly sophisticated use APT purpose of espionage and strategic advantage deniability false flag operations lesson 2

Answer 9

malicious has access (employees, contractors, partners) - wanting to sabotage, or for financial gain, business advantage - unintentional due to - weak policies/procedures and/or weak adherence to policy; - lack of training - Shadow IT lesson 2

Answer 10

points where attacker can discover/exploit vulnerabilities in a network or application lesson 2

Answer 11

``` how to access system direct access removable media email remote and wireless supply chain web and social media cloud ``` lesson 2

Answer 12

Tactics, techniques, and procedures a threat research source attempts to tell you how you are being attacked, identifies attackers describes what and how an attacker acts lesson 2

Answer 13

honeypot - a distraction system to trick attackers to attack honeynet - a network of honey pots intention is to learn about attackers and how they operate on give nssytem lesson 2

Answer 14

honeypot - a distraction system to trick attackers to attack honeynet - a network of honey pots intention is to learn about attackers and how they operate on give nssytem A form of threat research lesson 2

Answer 15

Intelligence Sharing and Analysis Centers shares threat intelligence and promote best practices lesson 2

Answer 16

Open source intelligence threat data sources a threat resource lesson 2

Answer 17

is a counter intelligent gathering effort to discover tactics , techniques, and procedures (TTP) of attackers sources: security solution providers - companies to assist in this effort dark net dark web honeypot/nets

Answer 18

Indicator of Compromise a residual sign that an asset or network has been successfully attacked or is continuing to be attacked or evidence of a TTP describes how to recognize what attack actions might look like ``` examples: unauthorized sw and files suspicious emails suspicious registry and file system changes unknown port and protocol usage excessive bandwidth rogue hw service disruption and defacement suspicious or unauthorized account usage ``` lesson 2

Answer 19

Structured Threat Information eXpression threat data feed framework, syntax for describing Cyber Threat Intel (CTI) lesson 2

Answer 20

Trusted Automated eXchange of Indicator Information a protocol for transmitting Cyber Threat Intel (CTI) data between server and clients lesson 2

Answer 21

Automated Indicator Sharing A service offered by Dept of Homeland Security (DHS) for companies to participate in threat intelligence sharing lesson 2

Answer 22

animated graphic showing the source, target, and type of attacks that have been detected by a CTI platform lesson 2

Answer 23

Common Vulnerability Scoring System lesson 3

Answer 24

Common Vulnerabilities and Exposures a threat feed, a database of these items maintained by Mitre Information about vulnerabilities is codified as signatures and scanning scripts that can be supplied as feeds to automated vulnerability scanning software lesson 2

Answer 25

Security Information and Event Management threat intel provider platform utilized AI to correlate CTI data with observed data from customer networks lesson 2

Answer 26

Security Orchestration, Automation and Response a designed as a solution to the problem of the volume of alerts overwhelming analysts' ability to respond Can be combined with SIEM scan the organization's store of security and threat intelligence, analyze it using machine/deep learning techniques, and then use that data to automate and provide data enrichment for the workflows that drive incident response and threat hunting lesson 2

Security+ Acronyms Flashcards

(50 cards)