cyber exam hw-based

vulnerability

A weakness in a computer system (the reason companies release software updates)

threat

A set of circumstances that has the potential to cause harm (malware has been created)

attack

When a bad acter exploits a vulnerability (hackers are using malware on your computer)

control

an action, device, procedure, or technique that removes or reduces a vulnerability

confidentiality

the c of the CIA triad

integrity

the i of the CIA triad

availability

the a of the CIA triad

integrity

Is my Data still accurate, has it been tampered with?

Authentication

Can my system confirm the identity of the user?

Nonrepudiation or Accountability

Can it confirm the sender can’t deny sending something?  Auditability – added by DOD, Can I look at logs and prove who did what and when?

password

authentication mechanism that uses “something a user knows”

facial recognition

authentication mechanism that uses “something a user is”

physical keys

authentication mechanism that uses “something a user has”

biometrics

technical term for “something a user is” types of authentications

complete English dictionary with capitalizations and substitutions

According to the book, passwords from which of the following lists would be the most difficult for a hacker to break:

Least Privilege

The idea that a subject (a user) should have access to the smallest amount of objects (data) required to perform a task is called

False Positive

Biometric security has a margin of error defined by the Receiver Operating Characteristic.  When a fingerprint incorrectly falls within the margin of error, but the system incorrectly confirms the identity, it is called a:

False Negative

Biometric security has a margin of error defined by the Receiver Operating Characteristic.  When a fingerprint incorrectly falls within the margin of error, but the system incorrectly denys the identity, it is called a:

Access Control List

One method used to manage user permissions with a set of lists that is used by Unix and Linux, and works on a User - Group - World model is called:

Role-Based Access Control

Assigning permissions to users based on their job by creating groups can be described as

Encryption

The process of encoding a message so that its meaning is not obvious is:

Work Factor

The difficulty in breaking an encryption is described as its

root

From the videos, the name of the account used to manage a Linux or Unix based system is:

Active Directory

From the videos, the database used to manage users and file permissions in a Windows Server based system is:

buffer overflow

When a computer program exceeds the space allocated to it, the resulting error is a 

virus

A type of program that can replicate itself by modifying other programs on the same computer is called a:

worm

A type of program that can replicate itself to other computers on the same network is called a

trojan horse

Malicious code that appears to be a useful download, but may have another non-obvious malicious effect, named for a greek legend:

nonmalicious

Security failures in software can be the result of a bug or flaw in the program, this is described as:

true-code red

From the videos, A well known computer virus was named for the flavor of Mountain Dew drank by security researchers who worked into the night to resolve the attack.

Recoverable System Image

Under user vigilance, if your system becomes infected, this backup type will allow you to reboot securely and replace corrupted system files with clean versions

false

According to Symantec (the maker of Norton Antivirus), as long as you use a Virus Detector, you cannot get a virus on your computer.

modular

Software that is designed in puzzle pieces that only perform a specific task in a program are described as

small,simple,independent

Dividing software into single purpose puzzle pieces as described above is one of 4 goals, identify the other 3 from this list: