Lesson 9 -CertMaster

Secure Baselines

Standardized security configurations for IT assets, representing a minimum level of security.

Hardening

The process of reducing system vulnerabilities to make IT resources more secure through configuration changes.

Wireless Security

Measures to protect wireless networks from unauthorized access and threats, including encryption and authentication.

Network Access Control (NAC)

A security solution that enforces policy on devices accessing network resources, ensuring they meet security standards.

Security Content Automation Protocol (SCAP)

A protocol that automates the assessment of security configurations against defined baselines.

Center for Internet Security (CIS) Benchmarks

Best practice guides for securing IT systems and data, covering multiple domains and regularly updated.

Security Technical Implementation Guides (STIGs)

Standardized security configurations developed by DISA for the Department of Defense's IT infrastructure.

Access Control Lists (ACLs)

Lists of permissions controlling traffic at a network interface level, based on packet information.

Intrusion Detection Systems (IDS)

Systems that monitor network traffic for signs of potential threats and alert administrators without blocking traffic.

Intrusion Prevention Systems (IPS)

Systems that detect threats and take action to prevent or mitigate them, often blocking malicious traffic.

Wi-Fi Protected Access (WPA)

A security protocol designed to secure wireless networks by addressing vulnerabilities found in WEP.

WPA3

The latest version of WPA that improves security features over its predecessor, WPA2, using stronger encryption.

Password-Authenticated Key Exchange (PAKE)

A method used in WPA3 for establishing a secure key exchange without revealing the password.

Remote Authentication Dial-In User Service (RADIUS)

An Internet standard for user authentication and authorization, often used in enterprise environments.

Dynamic VLAN Assignment

A feature of NAC that assigns devices to different VLANs based on their attributes or compliance.

Web Filtering

The process of blocking access to potentially malicious or inappropriate sites to protect network security.

Agent-Based Web Filtering

Installing a software agent on devices to enforce web filtering policies and provide local control.

Centralized Proxy Server

An intermediary that controls and monitors web traffic for content filtering and security enforcement.

Behavioral-Based Detection

Anomaly detection method that recognizes baseline normal traffic patterns to identify deviations indicating threats.

Machine Learning in Security

The use of algorithms to analyze data patterns and enhance threat detection in IDS and IPS systems.