Flashcards
SY0-401 Keywords/Terms
Cards in this deck (26)
- 13 Main Goals of SecurityPrevention,
Detection,
Recovery - 2This is the means for preventing users from gaining unauthorized accessPrevention
- 3This is the way the user is discovered attempting to access unauthorized data or after information has been lost.Detection
- 4This is the process in which vital data is retrieved from a crashed system, storage devices or physical resources.Recovery
- 5This is a concept that indicates exposure to the chance of damage or loss. Also signifies the likelihood of a hazard or dangerous threat occurring.Risk
- 6This is any event or action that could potentially cause damage to an asset.Threat
- 7Types of threats include...Unintentional/Unauthorized Access,
Interruption of Services,
Interruption of Access,
Damage to Facilities - 8This is any condition that leaves the system open to harm. (Weakness in the network)Vulnerability
- 9Types of vulnerabilities include...Improperly configured or installed hardware/software, Un-tested software/firmware patches, Bugs in software/OS, Misuse of software/communication protocols, Poorly designed networks, Poor physical security, Insecure passwords, Design flaws in software/OS, Unchecked user input
- 10This occurs when an attacker accesses a computer system without authorization.Intrusion
- 113 types of intrusions are...Physical,
Host-based,
Network-based - 12This is a technique used to exploit a vulnerability in an application or physical computer system.Attack
- 13Types of attacks include...Physical security,
Social engineering,
Software based,
Web-application based,
Network-based - 14These are countermeasures you need to put in place to avoid, mitigate and counteract security risks due to threats or attacks.Controls
- 15Types of controls include...Prevention control,
Detection control,
Correction control - 16This security management process consists of detecting problems and determining how best to protect the system.Identification
- 17This security management process consists of installing control mechanisms to prevent problems in the system.Implementation
- 18This security management process consists of detecting and solving any security issues after security controls have been implemented.Monitoring
- 19The CIA Triad consists of...Confidentiality,
Integrity,
Availablility - 20This is the principle of keeping info and communication private and protecting it from unauthorized people.Confidentiality
- 21This is the principle of keeping an organization's information accurate, free of errors, and without unauthorized modifications.Integrity
- 22This is ensuring systems operate continuously and authorized persons can access the data they need.Availability
- 23The goal of ensuring the party that sent a transmission or created the data remain associated with that data and cannot deny sending or creating that data is known as?Non-Repudiation
- 24The method that ensures that the entity requesting access to resources by using a certain set of credentials is the owner of the credentials is known as?Identification
- 25The method of validating a particular entity or individual's unique credentials is known as?Authentication
- 26—
Information
- Description
- Keywords & Terms that you will want to know for the certification.
- Created by
- cuse0528
- Views
- 38
- Tags
- Rating