Help
Options
Didn't know it?
click below
click below
Knew it?
click below
click below
Don't Know
Remaining cards (0)
Know
retry
shuffle
restart
0:00
Embed Code - If you would like this activity on your web page, copy the script below and paste it into your web page.
Normal Size Small Size show me how
Normal Size Small Size show me how
security concepts
Fundamentals of sec
| Question | Answer |
|---|---|
| What are the 5 security domains? | general security concepts, threats, vulnerabilities and mitigations, security architecture, security operations |
| information security | act of protecting data and information from unauthorized access, unlawful modification and disruption, disclosure, and corruption, and destruction. Protecting the data. |
| information system security | act of protecting the systems that hold and process the critical data. Devices that hold the data. |
| Various types of security control | technical, managerial, operational, physical, non-repudiation, authentication |
| CIA Triad | confidentiality, integrity, availability |
| confidentiality | ensure that info is only accessible to those with the appropriate authorization. Encrypt sensitive files. |
| integrity | ensures that data remains accurate and unaltered unless modification is required |
| availability | ensures that information and resources are accessible and functional when needed by authorized users. Website remains online 24/7 |
| non-repudiation | guaranteeing that a specific action or event has taken place and cannot be denied by the parties involved |
| AAA of security | authentication, authorization, accounting |
| authentication | process of verifying the identity of a user or system |
| authorization | defines what actions or resources a user can access |
| accounting | act of tracking user activities and resource usage, typically for audit or billing purposes |
| security controls | measures or mechanisms put in place to mitigate risk and protect the confidentiality, integrity, and availability of information systems and data. Technical, managerial, operational, physical |
| type of security controls | preventative, deterrent, detective, corrective, compensating, directive. Security professional implement various controls depending on the specific threats and vulnerabilities that they're addressing to protect an organization effectively |
| preventative | proactive measures implemented to thwart potential security threats or breaches. Firewall. |
| deterrent | Aim to discourage potential attackers by making the effort seem less appealing or more challenging. example, system, security sign, warning signs, banners on websites |
| detective | Monitor and alert organizations to malicious activities as they occur or shortly thereafter. Primary goal: detection and notification. example: security cameras. IDS intrusion detection system. |
| corrective | mitigate any potential damage and restore the system to the normal state. example. antivirus software to detect malicious software, quarantine and removal |
| compensating | Alternative measures that are implemented when primary security controls are not feasible or effective. example, running a legacy system that can't support WPA3. might implement WPA2 and use VPN. perfect solution: use WPA3. |
| directive | Often rooted in policy or documentation and set the standards for behavior within organization. often rooted in policy or documentation, set standards for behavior within an organization. |
Created by:
user-2044395