Security Flashcards

What is a security incident response plan?

Answer: A documented set of procedures for detecting, containing, eradicating, and recovering from security incidents

An incident response plan provides structured procedures for handling security breaches and attacks through defined phases: preparation, identification, containment, eradication, recovery, and lessons learned.

What is the difference between a vulnerability and an exploit?

Answer: A vulnerability is a weakness in a system that could be taken advantage of, while an exploit is the actual method or code used to take advantage of that weakness

A vulnerability is a flaw or weakness in a system, while an exploit is the specific technique, tool, or code that leverages that vulnerability to perform an unauthorized action.

What is defense in depth as a security strategy?

Answer: Implementing multiple layers of overlapping security controls so that if one layer fails, others still provide protection

Defense in depth deploys multiple, redundant security layers (physical, technical, administrative) so that the failure of any single control does not compromise overall security.

What is phishing and what are its common characteristics?

Answer: A deceptive attack that uses fraudulent communications disguised as trustworthy sources to steal sensitive information

Phishing is a social engineering attack using fraudulent emails, websites, or messages that impersonate trusted entities to trick victims into revealing passwords, financial information, or other sensitive data.

What is the purpose of a security policy in an organization?

Answer: To establish formal rules, guidelines, and procedures that define how the organization protects its information assets and manages security risks

A security policy provides the formal framework of rules, guidelines, and responsibilities governing how an organization protects its information assets, manages risks, and ensures regulatory compliance.

What is risk assessment in cybersecurity?

Answer: A systematic process of identifying, analyzing, and evaluating potential threats and vulnerabilities to determine the level of risk to organizational assets

Risk assessment is the systematic process of identifying threats and vulnerabilities, analyzing their potential impact and likelihood, and prioritizing risks to guide security investment and mitigation decisions.