Security+ Assessments And Audits

Front 1

Asset identification

Back 1

A thorough asset inventory must be performed to identify mission-critical systems as well as everyday items that your org needs to perform its services and produce its products.

Front 2

Risk assessment

Back 2

The goal of risk assessment is to minimize the impact of risks on an org. This is done through mitigation, assignment or acceptance.

Front 3

Risk assessment formulas

Back 3

The difference risk assessment formulas are exposure factor (EF), single loss expectancy (SLE), annualized rate of occurrence (ARO), and annual loss expectancy (ALE).

Front 4

Threats

Back 4

A thread is any person or tool that can take advantage of a vulnerability. Threat identifications is a formal process of outlining the potential threats to a system.

Front 5

Vulnerabilities

Back 5

A vulnerability is a weakness, error or hole in the security protection of a system, network, computer, software, and so on.

Front 6

Port scanner

Back 6

A port scanner is a vulnerability assessment tool that sends probe or test packets to a target system's port in order to learn about the status of those ports.

Front 7

Vulnerability scanner

Back 7

A vulnerability scanner is a tool used to scan a target system for known holes, weaknesses or vulnerabilities.

Front 8

Protocol analyzer

Back 8

A protocol analyzer is a tool used to examine the contents of network traffic

Front 9

OVAL

Back 9

OVAL (open Vulnerability and assessment language) is an international security community standard designed to promote the exchange of standardized scurity content across all platorms and for all tools sets and services.

Front 10

Password crackers

Back 10

A password cracker is a tool used to reverse-engineer the secured storage of passwords.

Front 11

Penetration testing

Back 11

A penetration test is a form of vulnerability scan that is performed by a special team of trained white hat security specialists

Front 12

Performance monitor

Back 12

A performance monitor is used to watch the relative activity of system metrics and compare them to known baselines, problem trends or malicious anomalies

Front 13

Systems monitor

Back 13

A system monitor is used to watch over system metrics such as CPU usage, active processes, memory consumption, free drive space, etc.

Front 14

Performance baseline

Back 14

A performance baseline is an expected level of system performance as measured through a performance monitoring tool.

Front 15

Behavior-based detection

Back 15

A behavior-based monitoring or detection method relies upon the establisment of a baseline or a definition of normal and benign. Once this baseline is established, the monitoring tool is able to detect activities that vary from that standard of normal.

Front 16

Anomaly-based detection

Back 16

An anomaly-based monitoring or detection method relies on definitions of all valid forms of activity. This database of known valid activity allows the tool to detect any and all anomalies.