Help
Options
Didn't know it?
click below
click below
Knew it?
click below
click below
Don't Know
Remaining cards (0)
Know
retry
shuffle
restart
0:00
Embed Code - If you would like this activity on your web page, copy the script below and paste it into your web page.
Normal Size Small Size show me how
Normal Size Small Size show me how
Hardening
| Question | Answer |
|---|---|
| Least functionality | The process of configuring a workstation or server with only essential applications and service services for the User |
| Secure baseline image | A standardized workstation set up, including OS, essential applications, and strict policies in corporate networks |
| Allowlisting | A security measure that permits only approved applications to run on an operating system |
| Blocklisting | Entails preventing listed applications from running, allowing all others to execute |
| services | Background applications that operate within the OS, executing a range of tasks |
| Trusted operating system (TOS) | Design to provide a secure computing environment by enforcing stringent security policies that usually rely on mandatory access controls |
| Integrity- 178B | POSIX-based OS that is designed for embedded system use |
| evaluation assurance level (EAL) 6 | Based on a set of predefined security standard and certification from the common criteria for information technology security evaluation |
| EAL 1 | lowest level of assurance |
| EAL 7 | highest level of assurance |
| mandatory access control (MAC) | Access permissions are determined by a policy, defined by the system, administrators and enforced by the operating system |
| SELinux (security-enhanced Linux) | Set of controls that are installed on top of another Linux distribution like CentOS or redhead Linux |
| Trusted solaris | Offers secure, multilevel operations with Mac, detailed system audits, and data/process compartmentalization |
| Evaluation assurance level (EAL) 4 | The OS was carefully designed, tested, and reviewed, offering good security assurance |
| patch management | Planning, testing, implementing, and auditing of software patches |
| planning | Creating policies, procedures, and systems to track to verify patch compatibility |
| Cisco UCS manager | Centralized resource and device management, including firmware for server network interface and devices |
| Group policy | Set of rules or policies that can be applied to a set of users or computer accounts within an operating system |
| security template | A group of policies that can be loaded through one procedure |
| Face lining | Process of measuring changes in the network, hardware, or software environment |
| Context based permission | Permission schemes that are defined by various properties for a given file or process |
| discretionary access control (DAC) | Each object has a list of entities that are allowed to access it |
| SELinux | Default context based permission scheme that's included inside of CentOS and red hat enterprise Linux |
| user | Defines what users can access an object |
| role | Defines what roles can access a given object |
| type | Groups objects together that have similar security requirements or characteristics |
| Level | Used to describe the sensitivity level of a given file, directory, or process |
| disabled | SELinux is essentially turned off, and so Mac is not going to be implemented |
| enforcing | All the SELinux security policies are being enforced |
| permissive | SELinux is enabled, but the security policies are not enforced |
| Data encryption | Process of converting data into a secret code to prevent unauthorized access |
| full disk encryption | Encrypt the entire hard drive to protect all of the data being stored on it |
| partition encryption | Similar to full disk encryption, but it is only applied to a specific partition on the storage device |
| VeraCrypt | Users can selectively encrypt partitions, like sensitive documents, while leaving OS partition unencrypted |
| volume encryption | Used to encrypt a set space on the storage medium, creating an encrypted container that can house various files and folders |
| File level encryption | Used to encrypt an individual file instead of an entire partition or an entire disk drive |
| GNU privacy guard (GPG) | Provides cryptographic privacy and authentication for data communication |
| database encryption | Secures the entire database, extending to multiple storage devices or cloud storage, similar to full encryption |
| SQL server transparent Data encryption (TDE) | Auto-encrypts the entire database without needing application changes, as the system handles encryption and encryption |
| Record level encryption | Used to encrypt individual records or rows within a database |
| Secure baseline | Standard security configuration applied to guarantee minimum security for a system, network, or application |
| AWS config | Defines and deploys secure configuration to across cloud resources |
Created by:
user-2044395