Cloudy Concepts
The computing architecture where on-demand resources are billed based on metered utilization.
What is cloud computing?
A scheme for identifying vulnerabilities developed by MITRE and adopted by NIST.
What is Common Vulnerabilities and Exposures (CVE)?
The process by which the need for change is recorded and approved.
What is change control?
An asset disposal technique that ensures data remnants are rendered physically inaccessible.
What is destruction?
A predetermined alternate location where a network can be rebuilt after a disaster.
What is a cold site?
A system that classifies the ownership and management of a cloud as a public, private, community, or hybrid.
What is a cloud deployment model?
The risk management approach to quantifying vulnerability data.
What is the Common Vulnerability Scoring System (CVSS)?
The process through which changes to the configuration of information systems are implemented.
What is change management?
An asset disposal technique that relies on a third-party to use sanitization or destruction methods.
What is certification?
A fully configured alternate processing site that can be brought online quickly after a disaster.
What is a hot site?
What are the cloud service models?
The process of investigating, collecting, analyzing, and disseminating information about emerging threats.
What is cyber threat intelligence (CTI)?
The process through which an organizations information systems components are kept in a controlled state.
What is a configuration management?
A scan that uses credentials to take a deep dive during the vulnerability scan.
What is a credentialed scan?
What is geographic dispersion?
The term for enterprise management software that mediates access to cloud services.
What is a cloud access security broker (CASB)?
A malicious script hosted on an attacker's site designed to compromise clients browsing a trusted site.
What is cross-site scripting (XSS)?
The software code or security research that remains in the ownership of the developer.
A temporary DNS record that redirects malicious traffic to a controlled IP address.
What is a DNS sinkhole?
A technique that ensures a redundant component can take over the functionality of a failed asset.
What is failover?
Organizations that provide infrastructure, application, and/or storage services via a subscription-based, cloud-centric offering.
What are cloud service providers (CSPs)?
The term for resources on the Internet that are protected from general access by multiple layers of encrypting and routing.
What is the dark web?
The operating system virtualization deployment containing everything required to run a service or application.
What is containerization?
A deception strategy that returns spoofed data in response to network probes.
What is fake telementry?
The security strategy that positions layers of diverse security control categories and functions.