Security Controls and Threat Actors
An individual who gains unauthorized access to computer systems or networks.
What is a hacker?
Personal information gathered from public sources.
What is OSINT?
A security team deploys a decoy system to attract attackers and monitor hacking attempts. What type of security technology are they using?
What is a honeypot?
Dividing networks into smaller sections to limit access and contain attacks.
What is network segmentation?
A physical location none of you should ever find yourselves in.
What is jail?
A firewall, antivirus program, or network segmentation device is an example of this class of security control.
What is a technical control?
This framework outlines the stages of a cyberattack.
What is the Cyber Kill Chain?
This simulates a few services and is easy to maintain.
What is a low level honeypot?
This standard will help an e-commerce company protect payment card data and transactions.
Payment Card Industry Data Security Standard (PCI DSS)?
When automated security monitoring fails, manually reviewing logs can serve as this type of control because it makes up for another control's weakness.
What is a compensating control?
A business wants to filter out threat intelligence that is not critically important to its organization.
What is relevancy?
A research institute deploys this kind of high-interaction honeypot to gain detailed knowledge about intruders.
What is a research honeypot?
This organization provides the cybersecurity guidance that organizations use to meet FISMA requirements.
What is National Institute of Standards and Technology (NIST)?
A security operations center is responding to an incident and uses a documented playbook to determine what actions to take next.
What is a responsive control?
This framework offers comprehensive security testing guidance on topics including the stages of attacks and the context of vulnerabilities.
What is Open-Source Security Testing Methodology Manual (OSSTMM)?
An intrusion detection system identifies suspected malicious traffic. The security system redirects that traffic to a honeypot that mirrors the real network without alerting the attacker.
What is bait and switch?
This organization includes a framework that covers standards for security controls, cloud security, and personal data and privacy.
What is International Organization for Standardization (ISO)?
A group of attackers targets several pharmaceutical companies with a coordinated financial fraud scheme. Financial gain is their primary motivation.
What is organized crime?
A group where leading cybersecurity vendors openly share threat information.
What is the Cyber Threat Alliance?
A security team wants to use a honeypot detection method that uses the TCP/IP stack to slow the spread of worms, backdoors, and similar malware.
What is a Layer 4 tarpit?
During a penetration test, an unfamiliar private IP address is generating significant network traffic. The testers want to investigate without actively interacting with the target.
What is passive discovery?
A security analyst begins researching a reputational threat by collecting indicators from one or more sources. After collecting the indicators, the analyst compares them against unusual entries found in these files.
What are log files?