Security

Network Vulnerabilities

100

Person or element with power to carry out a threat

Threat Actor

200

This malicious software enters a computer system without the owners knowledge or consent.

Malware

300

This is a more malicious form of ransomware that enables threat actors to encrypt and lock all files on a device.

Crypto-Malware

400

Three types of information protection (Often called the CIA triad)

Confidentiality

Integrity

Availability

500

The five fundamental defensive security principles

Layering, Limiting, Diversity, Obscurity, Simplicity

Crypto graphy

100

The length of time for which a key is authorized for use.

Cryptoperiod

200

The most common asymmetric cryptography algorithm

Rivest-shamir-adleman (RSA)

300

The framework that contains entities involved in digital certificate management.

Public Key Infrastructure (PKI)

400

The three classes of cryptographic algorithms

Hash, Symmetric, Asymmetric

500

Five basic protections of Cryptography

Confidentiality, Integrity, Authentication, Non-repudiation, Obfuscation

Network Security

100

The three most common interception attacks

Man-in-the-Middle

Man-in-the-Browser

Replay

200

The three types of attacks that inject "poison" into a normal network process to facilitate an attack

ARP Poisoning

DNS Poisoning

Privilege Escalation

300

The attack that takes advantage of procedures for initiating a session

Synchronize Flood Attack (SYN)

400

Two basic types of intrusion detection systems

Host Intrusion Detection System (HIDS)

Network Intrusion Detection System (NIDS)

500

A separate network located outside of the secure network perimeter

Demilitarized Zone (DMZ)

Operational Security

100

The rules for communication

Protocol

200

Manages virtual operating systems and supports one or more guest systems

Hypervisor

300

Established when a bluetooth device comes within range of another

Piconet

400

The encryption method for WPA2

Cipher Block Chaining Message Authentication Code Protocol (CCMP)

500

Autonomous AP that manages wireless authentication, encryption, and other functions for wireless devices.

Fat APs

Access Controls

100

Password weakness is linked to

Human Memory

200

The two key stretching algorithms

brypt

PBKDF2

300

The two unique keystroke variables

Dwell time

Flight Time

400

Individual to whom day-to-day actions have been assigned by the owner

Custodian or Steward

500

Allows an organization to maintain user profiles in a central database that all remote servers can share.

RADIUS