Security+ Flashcards

Practice flashcards covering security controls, Zero Trust models, network protocol, risk management, and incident response terminology based on the lecture transcript.

Log Monitoring

A type of operational security control focused on the regular review of log files to detect anomalies and improve security.

Zero Trust Control Plane

The component in the Zero Trust model responsible for making access decisions based on established policies and security threats.

Zero Trust Data Plane

The component in the Zero Trust model that ensures the correct and efficient transmission of data once an access decision has been made.

Policy Engine

A Zero Trust component that executes access decisions based on the policies defined by an administrator.

Policy Administrator

The Zero Trust component responsible for managing and updating security policies for access control.

Misconfiguration

A type of security incident involving the unauthorized disclosure of sensitive data caused by insecure settings in systems.

Cross-site request forgery (CSRF)

A web-based attack where unauthorized changes are made to a profile using a valid session cookie without the user's explicit action.

Port Security

A network feature used to regulate devices based on their unique physical addresses to ensure only authorized devices connect to the network.

Serverless Architecture

A model that allows developers to run code without managing any underlying infrastructure, with the cloud provider handling execution and scaling.

Snowflake Systems

Inconsistent system configurations that require manual maintenance, targeted for elimination to avoid security and stability issues.

Infrastructure as Code (IaC)

The management and provisioning of infrastructure through code rather than manual processes, used to ensure consistency across deployments.

Regulated Data

A data classification that includes non-redacted court records or government reports that must be handled according to specific legal requirements.

SD-WAN

A solution for secure communication among bank branches traveling across unsecured networks, providing wide area network capabilities.

SASE (Secure Access Service Edge)

A cloud-based solution that combines network security functions with WAN capabilities for users and devices outside the primary office.

SPF (Sender Policy Framework)

An email security standard that prevents spoofing by allowing domain owners to specify authorized mail servers.

DKIM (DomainKeys Identified Mail)

An email security standard that uses cryptographic signatures to ensure an email has not been tampered with during transit.

DMARC

A mechanism that utilizes SPF and DKIM to prevent email spoofing and phishing by verifying the authenticity of the sender's domain.

E-discovery

The process of identifying, finding, and recognizing electronically stored information for use as evidence in forensic or legal needs.

Agentless Posture Assessment

A NAC solution that provides less detailed information about the client because it does not require software installation on the device.

Data Loss Prevention (DLP)

A set of techniques and tools used to prevent the unauthorized transmission or disclosure of sensitive information.

User Provisioning

The process of automating the creation, maintenance, and deactivation of user accounts to streamline access and reduce overhead.

Package Monitoring

A vulnerability management activity that tracks software dependencies and ensures all required components are up to date and compatible.

PCI DSS

The security standard defining the safe handling and storage requirements for branded credit card transactions.

ARO (Annualized Rate of Occurrence)

The expected frequency of occurrence of a specific risk within a given year.

ALE (Annual Loss Expectancy)

The expected monetary loss from a risk per year, calculated as $ALE = SLE \times ARO$.

Impact

The standard term in risk management describing the effect of a risk event on an organization's operations, finances, or reputation.

HIPS (Host-based Intrusion Prevention System)

Software installed on a system to detect and prevent unauthorized activity or buffer overflow attacks by monitoring memory and traffic.

WAF (Web Application Firewall)

A security tool used to protect HTTP applications against threats like SQL injection and cross-site scripting.

Key Exchange

The process in encryption where two parties establish a shared secret for communication purposes.

Birthday Attack

A cryptographic attack that exploits the mathematics behind hashes to find two different documents with the same MD5 hash value.

Journaling

A technique that maintains a log of all transactions and changes to allow a system to recover to the exact point of failure after a crash.

SWG (Secure Web Gateway)

A solution used to filter URLs on content deny lists and perform threat analysis for user traffic.

Certificate of Disposal

A document including the disposal method, date, and responsible personnel to verify appropriate sanitization of discarded assets.

SOW (Statement of Work)

A document providing detailed instructions, requirements, features, and timelines for a specific project.

Data Owner

The role in a data governance framework responsible for making decisions about how data is used and accessed.

Wildcard Certificate

A type of digital certificate that secures multiple subdomains under a single primary domain.

ARP Spoofing

An attack where a workstation tries to associate its MAC address with the IP address of a server to intercept traffic.

Clustering

A high-availability method where a workload is distributed across multiple machines so others take over if one fails.

Data Sanitization

The process of completely and irreversibly removing data from media storage devices through methods like overwriting or physical destruction.

RPO (Recovery Point Objective)

The maximum targeted period in which data might be lost from an IT service due to a major incident.

Jailbreaking

The process of bypassing manufacturer restrictions on a mobile device to gain root access and install unauthorized applications.

End-of-life Vulnerability

A vulnerability resulting from hardware or software that is no longer being produced or supported but is still in use.

Jump Server

A device that acts as a gateway to a perimeter network, serving as the single opening to increase security for critical data.

SCAP (Security Content Automation Protocol)

A framework that enables automated vulnerability assessment, configuration management, and compliance checking.

Risk Register

A system for continuously monitoring and tracking identified risks over time in the risk management process.

TPM (Trusted Platform Module)

A hardware chip embedded in a motherboard used for secure storage of symmetric and asymmetric keys.

Tokenization

A data protection method that substitutes sensitive data with non-sensitive placeholders.

Workforce Multiplier

A strategy that enables organizations to scale security capabilities using a combination of human and automated resources.

Ephemeral Credentials

Temporary access credentials for privileged users that are granted for a short duration and automatically expire.

XDR (Extended Detection and Response)

A security system that provides comprehensive monitoring across multiple applications and tools to detect sophisticated, multi-vector attacks.

Beaconing

A malicious activity where a workstation repeatedly sends HTTPS requests to unfamiliar IP addresses to signal a command and control server.

Guard Rails

Boundaries in automation workflows designed to ensure processes remain within intended parameters and prevent unintended actions.