click below
click below
Normal Size Small Size show me how
T+ Lesson 10
| Question | Answer |
|---|---|
| antimalware | Software designed to detect and remove viruses and other malware. Sometimes called antivirus. |
| availability | A security state in which information and systems are always available to authorized users. |
| baiting | Attackers offer something the victim wants, such as a free version of a popular game, to get them to click a malicious link or download malware. |
| behavioral security | Cybersecurity that focuses on understanding and analyzing human behavior. |
| black-hat hacker | A hacker who hacks without the consent of the system owner; compare to white-hat hacker. |
| cache | To save a copy of files that have been previously accessed, for faster re-access to them later. |
| certificate authority | A trusted third-party company that issues a security certificate used to validate an online identity. |
| CIA triad | Confidentiality, integrity, and availability, the three qualities that systems and data should continuously offer to users. |
| client-side scripts | Scripts that run on the user’s device rather than on the web server. |
| confidentiality | A security state in which information and systems are available only to authorized users and subsystems. |
| cookies | Small text files stored on the user’s local system, used to remember their history with a certain website. |
| cybercriminal | Someone who uses a computer to commit crimes. |
| first-party cookie | A cookie that is placed on a client system by the server being accessed. |
| firewall | A hardware device or software utility that thwarts some hacking attempts by blocking unauthorized access to software ports. |
| Flash | A now-obsolete multimedia software platform that delivered interactive content on web pages. |
| hacker | Someone who gains or seeks to gain unauthorized access to a system or its data. |
| impersonation | Attackers pretend to be someone they are not to trick victims into revealing information or taking action. |
| integrity | A security state in which information and systems are not modified, deleted, or disabled without authorization to do so. |
| Java applet | Small app written in Java that can be embedded in web pages to provide dynamic and interactive content. |
| malware | Software designed to violate some part of the CIA triad. A virus is one type of malware. |
| penetration testing | The work that a white-hat hacker does to try to break into a system to test its security. |
| phishing | Attackers sending messages that appear to be from legitimate sources but contain malicious links or attachments designed to steal credentials or install malware. |
| pop-up | A small extra window that appears spontaneously when you visit a certain website. |
| pretexting | Attackers creating a fabricated scenario or pretext to elicit sensitive information. |
| principle of least privilege | A security best practice in which users and accounts receive only the permissions they need and are denied all others. |
| privacy | Protection from confidentiality attacks. |
| proxy server | An intermediary server that serves as a gateway between a device or LAN and the internet. |
| quid pro quo | Attackers promising something in return for information or access. |
| scareware | Attackers create a sense of urgency or fear to convince victims to take actions that are against their best interests. |
| security | Protection from integrity and availability attacks. |
| social engineering | A tactic used to manipulate and deceive people into divulging confidential information, performing actions, or making decisions that compromise security. |
| strong password | A password that is difficult to guess or crack. |
| third-party cookie | A cookie placed on the client system by a company or individual other than the owner of the website being accessed. |
| white-hat hacker | Someone who is hired to try to break into a system to test its security. |
| whitelist | A list of allowed applications; all other applications will be blocked. |
| zero-day exploit | An exploit that targets an unpatched weakness in an OS or app. |