Flashcards
Final Short Answer
Flashcards do conjunto (49)
- 1What is physical security (what does it involve)?Physical security is the measures involved to protect personnel, equipment, and property against anticipated threats.
- 2What are the three security roles and responsibilities relating to security convergence?Operational Security
Facilities Management
Information Security - 3Operational SecurityThe process of creating policies and procedures and establishing controls to preserve privileged information
- 4Facilities ManagementThe ability to run and maintain crucial environment systems, mechanical processes, HVAC, fire alarms, etc.
- 5Information SecurityThe process of protecting the confidentiality, integrity, and availability of data from accidental or intentional misuse by people inside or outside the organization or facility.
- 6What is the purpose of a risk assessment?To assess the system’s use of resources and controls (implemented and planned) to eliminate and/or manage vulnerabilities that are exploitable by threats to the organization.
- 7What is the most important part of maintaining the security of a computer system?Physical security
- 8What is a firewall?A device or collection of components placed between two networks that only allows authorized traffic, as defined by the local security policy, to pass.
- 9Explain the concept of Deny versus Allow in Firewall rules?Deny - the traffic does not met the minimum requirements for passage set forth in the firewall's security policy
Allow - the firewall has deemed the traffic to be authorized for passage - 10Why would hiring an ex-hacker not be wise for a security position?They historically do not adhere to strict ethical codes or policies, which may lead to legal complications and damages for the company.
- 11Why should you ask permission or alert fellow personnel before running Penetration tests?Getting permission ensures that your actions are well understood and for the benefit of parties involved.
- 12What is Access Control?Access control is the collection of mechanisms that permits managers of a system to exercise a directing or restraining influence over the behavior, use, and content of a system.
- 13What are the three main principles pertaining to Access Controls?Availability, Integrity, Confidentiality
- 14AvailabilityInformation, systems, and resources need to be available to users in a timely manner to not effect productivity.
- 15IntegrityProtecting the data/resource from being altered in any unauthorized fashion.
- 16ConfidentialityThe assurance that information is not disclosed to unauthorized individuals, programs, or processes.
- 17What are some methods for verifying Authentication?Biometrics, passwords, passphrases, tokens, memory cards, smart cards, cryptographic keys, etc.
- 18What are some examples of Biometric systems?Fingerprints, palm scanning, hand geometry/topography, iris scanning, signature/keyboard dynamics, voice printing, facial scanning, etc.
- 19Explain Single Sign-On. List at least one strength and one weakness.It allows users to access multiple applications with one set of login credentials. A strength of single sign-on is that it lessens the likelihood that someone will be locked out of an application due to loss of credentials. A weakness is that if an unauthorized individual procured the information that person would have access to multiple applications.
- 20What is a Buffer Overflow?Sending more data than an application was designed to handle properly, causing a malfunction that permits illicit access.
- 21What is an Intrusion Detection System (IDS)?Firewall products which are designed to detect breaches in security by collecting packets and alerting the user when suspicious traffic passes through.
- 22What is an Intrusion Prevention System?A system that monitors a network or system for malicious activity.
- 23What is Identity Theft?Taking someone else’s identity and using it for one’s own benefit.
- 24Why are log files important?Log files are invaluable in detecting and tracking attempted intrusions and other suspicious activity.
- 25What is COOP?Continuity of Operations
- 26What is the purpose of COOP?To ensure an enterprise’s ability to survive and sustain critical core business operations and functions during an unforeseen enterprise interruption event.
- 27What is the purpose of DR?To ensure recovery from the loss of a complete site.
- 28What are some essential elements of COOP?• Plans & Procedures
• Mission Essential Functions
• Delegations of Authority
• Orders of Successions
• Alternate Facilities
• Interoperable Communications
• Vital Records and Databases
• Logistics and Administration
• Personnel Issues and Coordination
• Security
• Test, Training, and Exercise
• Program Management - 29What is the definition of a disaster?Any natural or man-made event that disrupts the operations of a business in such a significant way that a considerable and coordinated effort is required to achieve a recovery.
- 30What are the two types of disasters?Natural and man-made.
- 31What are some benefits of planning for COOP and DR?Reduces risk, improves processes, improves organizational maturity, improves availability and reliability, and provides marketplace advantage.
- 32What are the five levels of testing plans for COOP and DR?• Document review
• Walkthrough
• Simulation
• Parallel test
• Cutover test - 33What is ReliabilityThe probability of a component or system performing its mission over a certain length of time.
- 34What is MTBF?Mean Time Between Failures
- 35What are some reasons for data loss?Hardware failures, software malfunctions, accidents, natural disasters, disgruntled employees
- 36What is Redundancy? Provide examplesThe ability of a system to keep functioning normally in the event of a component failure, by having backup components that perform duplicate functions. Examples include multiple CPUs, RAID disks, second network connection.
- 37What is Failover? Provide examplesIn the event of a physical disruption to a network component, data is immediately rerouted to an alternate path so that services remain uninterrupted. Examples include having an alternate server for the same functions or a second switch for the same network.
- 38Explain incremental backups.Incremental backups restore all changes since the last backup of any type.
- 39What is a virus?A computer program that can copy itself and infect a computer.
- 40How often should one update anti-virus definitions?Weekly
- 41How do you recover a file once it has been deleted?By restoring it from the recycling bin or from a backup
- 42What is Spyware?Spyware is software that collects information about a user’s activity.
- 43What is Adware?Adware is software that downloads advertisements.
- 44How can you tell your system is 100% clean once you remove a virus?Scan the machine thoroughly for any other virus infections before reconnecting it to your network.
- 45Explain why it is not good to use the “Administrator” logon or rights all of the time?Any malware you accidentally or unknowingly run has these rights and can do anything to your system.
- 46How can you defend against a virus being loaded from behind your firewall?By adjusting the settings of the firewall accordingly.
- 47What is considered an insider threat?Typically described as a disgruntled or unscrupulous employee trying to gain access to information they shouldn’t, and sharing it for personal gain, espionage or revenge.
- 48What is Phishing?Scams to steal valuable information such as credit cards, social security numbers, user IDs and passwords.
- 49Explain Social Engineering.A method for breaching a system’s security that relies more on human nature than technology which uses standard con artist techniques to get users to offer up the information needed to gain access to a target system.
Informações
- Descrição
- Information Technology FlashCards sobre Final Short Answer, criado por Mary Sunseri em 29-04-2018.
- Criado por
- Mary Sunseri
- Visualizações
- 4
- Avaliação