Security+ Domain 4 - Assessments And Audtis

Front 1

What is Asset Identification?

Back 1

A thorough asset inventory to identify mission critical systems and items. Used to prioritize assets.

Front 2

What is Risk Assessment?

Back 2

To minimize impact of risks on an organization. Mitigation, assignment and acceptance.

Front 3

What is Exposure Factor (EF)?

Back 3

Percentage of asset value loss that would occur if a risk was realized.

Front 4

What is Single Loss Expectancy (SLE)?

Back 4

Potential dollar value loss from a single risk realization incident. Calculate by multiplying EF by asset value

Front 5

What is Annual Loss Expectancy (ALE)?

Back 5

Potential dollar value loss per year per risk. Calculate by multiplying SLE by ARO.

Front 6

What is a Threat?

Back 6

Person or tool that can take advantage of a vulnerability.

Front 7

What is a Vulnerability?

Back 7

Weakness, error or hole in the security protection of a system, network, computer, software, etc

Front 8

What is a Port Scanner?

Back 8

Vulnerability assessment tool that sends probes or test packets to a target system's ports in order to learn about the status of the ports. Can create an inventory of services

Front 9

What is a Vulnerability Scanner?

Back 9

A tool used to scan a target system for known holes, weaknesses or vulnerabilities. Have a db of attacks, probes, scripts etc.

Front 10

What is a Protocol Analyzer?

Back 10

A tool used to examine the contents of network traffic.
Capture network traffic and generate statistics for creating reports.

Front 11

What is Open Vulnerability and Assessment Language (OVAL)?

Back 11

International security community standard designed ot promote and exchange standardized security content across all platforms and for all tool sets and services.

Front 12

What is Network Mapper?

Back 12

Specialized tool that borrows features from port scanners and protocol analyzers in order to actively or passively build a logical infrastructure map of a network.

Front 13

What is a Performance Monitor?

Back 13

Monitors changes to the approved system baseline

Front 14

What is Systems Monitor?

Back 14

Used to watch over system metrics, such as CPU usage, active processes, memory consumption, free drive space, system temperatures, etc.

Front 15

What is Performance Baseline?

Back 15

Expected level of system performance as measured through a performance monitoring tool. A policy extracted from real activity levels.

Front 16

What is Behavior based detection?

Back 16

Relies on establishing a baseline or definition of normal and benign. The tool then can detect activities that vary from the standard of normal.
Strengths: Can identify malware, monitor for malware activities, learn about malware, not OS specific.
Weaknesses: false alarms, slow, costly, needs retraining.

Front 17

What are Signature Based Detection?

Back 17

Relies on a database of signatures or patterns of known malicious or unwanted activity. Can quickly and accurately detect an event from the database.
Strengths: Accurate detection because of prior detection, low false positives, detailed text logs, uses little resources.
Weaknesses: Polymorphic viruses immune, rule sets need constant updating, inability to detect new attacks, based on passive monitoring.

Front 18

What is Anomaly based detection?

Back 18

Relies on definitions of all valid forms of activities. From that it can detect anomalies.
Good for detecting protocol and port exploitation, new expoits or buffer overflow, DoS attacks on payloads or volume, normal network failures, varients of existing attacks in new environments.

Front 19

How do you calculate ALE?

Back 19

SLE x ARO

Front 20

How do you calculate SLE?

Back 20

Asset value x Probability

Front 21

What is Ping?

Back 21

Monitoring tool that tests network connectivity by sending echo request to host.

Front 22

What is Tracert/traceroute?

Back 22

Monitoring tool that traces route a packet takes. Good to find out where something is getting hung up.

Front 23

What is Nslookup?

Back 23

Monitoring tool that is used to troubleshoot DNS.

Front 24

What is Netstat?

Back 24

Monitoring tool that displays ports computer is listening to, routing table, interface stats

Front 25

What is IPConfig/IFconfig?

Back 25

Monitoring tool that displays TCP/IP settings

Front 26

What do you monitor in Performance Monitoring?

Back 26

RAM, logical and physical drives, CPU, and Protocols.