Asset Management & Data Protection
A centralized repository used by IT and security teams to track enterprise hardware and software assets, their configurations, and their dependencies.
What is a Configuration Management Database (CMDB)?
An architectural cluster design where one server actively handles production traffic while a secondary standby node waits to take over in the event of failure.
What is an Active/Passive (A/P) cluster?
he structured plan that details how an organization will maintain or immediately recover essential mission-critical business functions during an emergency.
What is a Continuity of Operations Plan (COOP)?
A decoy server configured with intentional vulnerabilities and placed on a network to attract, detect, and log threat actor activities.
What is a honeypot?
Short, sturdy vertical posts installed along building perimeters to physically stop vehicle ramming intrusions.
What are bollards?
This backup technology captures an instantaneous, point-in-time image of a virtual machine’s state and disk to enable rapid rollback.
What is a snapshot (or checkpoint)?
A disaster recovery site that has power, connectivity, and hardware pre-installed, but requires restoration of recent data backups before production can resume.
What is a warm site?
A non-intrusive exercise where key incident response stakeholders gather in a conference room to walk through their roles during a hypothetical crisis scenario.
What is a tabletop exercise?
An entire network segment of interconnected decoys designed to emulate an authentic enterprise production environment.
What is a honeynet?
A physical security entryway consisting of two interlocking doors where the first door must close and lock before the second door will open.
What is an access control vestibule (or mantrap)?
An enterprise backup feature that identifies and removes duplicate data blocks across storage systems to optimize backup disk capacity.
What is data deduplication?
What high availability percentage corresponds to less than 5.26 minutes of total unscheduled downtime per year?
What is "Five Nines" (99.999%)?
n operational strategy where multiple employees are trained to execute each other’s critical responsibilities to mitigate people-related operational risks.
What is cross-training?
A dummy document placed in a database containing believable but fake intellectual property or credentials that triggers an alarm if accessed.
What is a honeyfile?
What minimum perimeter fence height is recommended by physical security guidelines to offer delay against a determined human intruder?
What is 2.5 meters (8 feet)?
To prevent unauthorized recovery of sensitive data from decommissioned hard drives, this software process overwrites disk sectors with random zeros and ones.
What is drive wiping / sanitization?
This emergency battery backup device supplies instantaneous electrical power to critical servers to bridge the gap until emergency diesel generators start up.
What is an Uninterruptible Power Supply (UPS)?
A testing exercise where secondary backup systems or alternative data centers are brought completely online to verify automated failover under real conditions.
What is a failover test (or simulation)?
A bogus credential, API token, or database key embedded in a decoy file designed to alert security teams when used anywhere in an environment.
What is a honeytoken?
This environmental control system manages computer room ambient temperature, humidity, and airflow to prevent server hardware degradation.
What is HVAC (Heating, Ventilation, and Air Conditioning)?
This formal legal document provided by a third-party disposal vendor serves as verifiable audit proof that retired storage media was permanently and securely destroyed.
What is a Certificate of Destruction (or Sanitization Certificate)?
In a clustered server farm or load-balanced pool, this shared single address represents the entire service to external clients while masking the individual node IPs.
What is a Virtual IP (VIP)?
By implementing multiple cloud service providers and integrating security appliances from different manufacturers, an organization exercises this operational strategy to avoid single-point failure dependencies.
What is vendor and platform diversity?
Because legitimate production traffic should never touch these decoy systems, any interaction generates high-fidelity alerts resulting in this major operational advantage over standard IDS signatures.
What is a near-zero false positive rate?
This specialized volumetric physical security sensor identifies room intrusions by emitting high-frequency sound waves and measuring Doppler shifts in the return signal.
What is an ultrasonic sensor?