Cybersecurity & Risk Management Flashcards

In CRT practice, what is the purpose of version control in software development?

Answer: To track changes, manage code history, and enable collaborative development

Version control systems track all changes to code over time, maintain a complete history of modifications, enable multiple developers to work simultaneously, and allow reverting to previous versions when issues arise.

What does API stand for and what role does it play in CRT development?

Answer: Application Programming Interface — it defines how software components communicate with each other

An API (Application Programming Interface) defines the methods, data formats, and protocols that software components use to communicate. APIs enable integration between different systems and services.

In CRT cybersecurity, what is the principle of least privilege?

Answer: Users should only have the minimum access rights necessary to perform their job functions

The principle of least privilege limits each user's access rights to only what is strictly necessary for their role, reducing the potential damage from accidents, errors, or malicious actions by minimizing the attack surface.

What is the purpose of encryption in CRT data security?

Answer: To convert readable data into an unreadable format that can only be decoded with the proper key

Encryption transforms plaintext data into ciphertext using mathematical algorithms and keys, ensuring that only authorized parties with the correct decryption key can access the original information.

In CRT project methodology, what distinguishes Agile from Waterfall?

Answer: Agile uses iterative sprints with continuous feedback, while Waterfall follows a sequential linear process

Agile development uses short iterative cycles (sprints) with continuous customer feedback and adaptation, while Waterfall follows a strict sequential process (requirements → design → implementation → testing → deployment) with limited iteration.

What is a firewall's primary function in CRT network security?

Answer: To monitor and filter incoming and outgoing network traffic based on security rules

A firewall monitors all network traffic and enforces security rules by allowing or blocking specific traffic based on source, destination, port, and protocol, forming the first line of defense against unauthorized network access.