Misc
Command line tool for port scanning
GF
NMAP
This Protocol is to enable anyone to locate organization, individuals, and other resources in a domain. It is a major part of Active Directory.
TX
LDAP
Secures password hash from rainbow table attacks
LM
Salt
What key is given to CA to publish in a certificate so that other systems or users can send encrypted data using asymmetric encryption
SR
Public
Type of risk management if you call Jake from State Farm
SF
Transfer the risk
Used to aggregate logs and alert SOC of security events
BB
SIEM
Security Information and Event Management
This Access Control Model combines the use of Data Confidentiality level with a user clearance level.
AA
MAC
Module on motherboard stores Bitlocker encryption keys?
MC
TPM
Published list from CA of all revoked certificates. It is not web based.
SJ
CRL
Centralized document used in risk management to record and track all identified risks associated with a project, program, or organization
SG
Risk register
This tool is designed to distract attackers, keeping them away from the real network and potentially revealing information about themselves.
KL
Honeypot
This concept is designed to provide better security by requiring more than a single way to prove you are who you claim to be.
RF
Multifactor Authentication
Most current 1 way hashing algorithm
ZB
SHA
Types of keys is found in a key escrow?
CJ
Private
SLE x ARO=
PD
ALE Annual Loss Expecancy
This device is designed to provide caching and URL filtering
JK
Proxy Server
Extremely simple form of “Something you Have”. A notification shows up on a mobile device with a simple tap to confirm
YK
Push notifications
Asymmetic encrytion for mobile devices such as tablets and smartphones
YM
ECC
Elliptical Curve Cryptography
Web based tool would contact the CA to verify revocation?
QC
OCSP (Online Cert Status Protocol)
The average time it takes to repair a serviceable device
YX
MTTR
This deployment model is designed to maintain control of mobile devices by assigning employees devices that are owned and controlled by the company but allowing for personal use
MN
COPE: Company Owned, Personally Enabled
This Access Control Model is determined by the owner of the file
OP
DAC
What steganography is used for?
RW
Obfuscation
Device that issues digital certificates?
DE
CA
Verifying the accuracy, reliability, and effectiveness of security controls and is done by a 3rd party
AL
Attestation