Flashcards
sec + final_2
Cards in this deck (44)
- 1an electronic document that associates credentials with a public keyDigital certificate
- 2the proccess of identifying end users in a transaction that involves a series of steps to be carried out before the user's identity is confirmedCertificate authentication
- 3Subordinate CAbelow the root in the hierarchy, issue certs and provide day-to-day management of the certs, including renewal, suspension, and revocation
- 4if a user, server, or client machine does not have the right cert, there is nothing you can do to secure communications to or from that entityEnroll certificates
- 5users and other entities obtain certs from the CA through the ..Certificate Enrollment Process
- 6authentication is determined by the cert policy requirements (ID/password, driver's license)RA authenticates entity
- 7why did the connection failbecause the server now requires secure communications
- 8you should renew certs appropriately so that you do not have any interruptions in your security servicesCertificate renewal
- 9an alternative to key backups, can be used to store private keys securely, while allowing one or more trusted third parties access to the keys under predefined conditionskey escrow
- 10an HTTP based alternative to a CRL for checking the status of revoked certs. The responder uses the certs serial number to search for it in the CA's databaseOnline Certificate Status Protocol
- 11deterrent, preventive, detective, compensating, technical, administrativePhysical security controls
- 12the practice of ensuring that the requirements of legislation, regulations, industry codes, and standards, and organizational standards are metCompliance
- 13info security professionals must observe generally accepted forensic practices when investigating security incidentsForensic requirements
- 14common information classificationshigh, medium, low
restricted, private, public
confidential, restricted, public - 15correspondence of a private nature between two people that should be safeguardedprivate
- 16this agreement clearly defines what services are to be provided to the client, and what support if any will be providedService-level agreement (SLA)
- 17evaluation of an organization, a portion of an organization, an info system, or system components to assess the security riskRisk assessment
- 18evaluation of known threats to an organization and the potential damage to business operations and systemsThreat assessment
- 19hardware/software installations that are implemented to monitor and prevent threats and attacks to computer systems and servicesTechnical controls
- 20reviews may be carried out manually by a developer, or automatically using a source cod analysis toolPerform code reviews
- 21completed before a security implementation is applied, the reviewer can determine if the security solution will in fact fulfill the needs of an organizationReview the security design
- 22also known as profiling, the attacker chooses a target and begins to gather info that is publicly or readily availableFootprinting
- 23also called banner grabbing, the second step is to scan an organization's infrastructure or systems to see where vulnerabilities might lieScanning
- 24where the tester is given no specific information about the structure of the system being testedBlack box test
- 25where the tester has partial knowledge of internal architectures and systemsGrey box test
- 26when the tester knows all aspects of the system and understands the function and design of the system before the test is conductedWhite box test
- 27the position an organization takes on securing all aspects of its businessSecurity posture
- 28a software solution that detects an prevents sensitive info in a system from being stolen or falling into the wrong handsData Leak Prevention (DLP)
- 29a specific instance of a risk event occurring, whether or not it causes damageSecurity Incident
- 30the set of practices and procedures that govern how an organization will respond to an incident in progressIncident management
- 31a criminal act that involves using a computer as a source or target, instead of an individualComputer crimes
- 321. Assess the level of damage 2. Recover from the incident 3. Report the incidentBasic incident recovery process
- 33should be done to determine the extent of damage, the cause, and the amount of expected downtimeDamage Assessment
- 34a report that includes a description of the events that occurred during a security incidentIncident reports
- 35a policy that defines how an organization will maintain normal day-to-day business operations in the event of business disruption or crisisBusiness continuity plan (BCP)
- 36a preparation step in BCP development that identifies present organizational risks and determines the impact to ongoing, business-critical operations and processes if such risks actually occurBusiness Impact Analysis (BIA)
- 37a component of the BCP that specifies alternate IT contingency procedures that you can switch over to when you are faced with an attack or disruption in service leading to a disaster for the organizationIT contingency planning
- 38Disaster Recovery Plan- a list and contact info for those responsible for the recovery
-an inventory of hard/soft ware
-a record of important business info that you would require to continue business
-a record of procedure manuals and critical info such as BCP and IT plan
-Specifications for alt sites - 39the rating on a device or devices that predicts the expected time between failuresMean time between failures (MTBF)
- 40action-based sessions where employees can validate DRPs by performing scenario-based activities in a simulated environmentFunctional exercises
- 41should be conducted to determine the extent of incurred facility damages, to identify the cause, estimate downtime, and can also determine the appropriate response strategyAssess the damage
- 42a group of designated individuals who implement recovery procedures and control recovery operations in the event of an internal or external disruption to critical business processesRecovery team
- 43all selected files that have changed since the last full or differential backup are backed upincremental backup
- 44backing up sensitive or important data is only part of the solution, as that backup also needs to be securesecure backups
Information
- Description
- final
- Created by
- dustin fowler
- Views
- 19
- Tags
- History
-
- Created by maxwell3254 · Jun 29, 2015
- Copied by dustin fowler · Jun 29, 2015
- Rating