Chapter 1
Permitting authorized access to information while at the same time protecting information from improper disclosure (1.1)
What is confidentiality?
A previously unknown system vulnerability with the potential of exploitation without risk of detection because it doesn't fit recognized patterns or methods (2.1)
What is a zero day?
Anything that a subject attempts to access - a device, process, user, etc - that responds to a request for service (3.1)
What is an object?
An address number that both ends of the communication link agree to use when transferring data, thereby allowing a single IP address to support multiple simultaneous communications (4.1)
What is a logical port?
The process of using a mathematical algorithm against data to produce a numeric value that is representative of that data (5.1)
What is hashing?
What is the state (of the system)?
Events with a negative consequence such as system crashes, network packet floods, unauthorized use of system privileges, defacement of a webpage, or execution of malicious code (2.1)
What are adverse events?
Collecting and storing user activities in a log, which is a record of the events occurring within an organization's systems and networks (3.1)
What is logging?
The layer of the network model responsible for receiving bits from the physical connection medium and converting them into a frame (4.1)
What is the lower layer? (media/transport layer)
The process of applying secure configurations and locking down various hardware, communications systems, and software (5.1)
What is hardening?
A documented lowest level of security configuration allowed by a standard or organization (1.1)
What is a baseline?
An IR plan component that includes monitoring attack vectors, analyzing incidents, and prioritizing incident response (2.1)
What is detection & analysis?
An independent review and examination of records and activities to assess the adequacy of system controls to ensure compliance with established policies & procedures (3.1)
What is an audit?
A self-replicating piece of code that spreads without the consent of a user, but frequently with their assistance (4.2)
What is a virus?
The systematic notification, identification, deployment, installation, and verification of OS and application software code revisions (5.2)
What is patch management?
The means by which a threat actor carries out their objectives (1.2)
What is a threat vector?
An IR plan component that includes gathering evidence, identifying the attacker, and isolating the attack (2.1)
What is containment, eradication, & recovery?
A safeguard of countermeasure designed to preserve confidentiality, integrity, and availability of data (3.1)
What is a (security) control?
A network resource consumption attack that has the primary goal of preventing legitimate activity on a victimized system (4.2)
What is a denial-of-service (DoS) attack?
The third stage of change management that includes a variety of activities, like scheduling, testing, implementing, evaluating, and documenting (5.3)
What is the rollback stage?
The adoption of national standards for electronic healthcare transactions while protecting the privacy of individuals' health information (1.4)
What is the Health Insurance Portability and Accountability Act? (HIPAA-1996)
The proactive development of procedures to restore business operations after a disaster or other disruption (2.2)
Access control that requires the system itself to manage access controls in accordance with the organization's security policies (3.3)
What is mandatory access control? (MAC)
The process in which bundles of data are unpacked or revealed (4.1)
What is de-encapsulation (or decapsulation)?
The practice of following an authorized user into a restricted area or system (5.4)
What is tailgating?