Identifies systems and components that are essential to the organisations success.
Identifies various scenarios that can impact these systems and components.
Maximum downtime limits, and potential lossses from an incident.
Helps identify RTOs and RPOs.
Card 22
Question
BIND
Answer
Berkeley Internet Name Domain.
BIND is a DNS software that runs on Linux and Unix servers.
Most Internet-based DNS servers use BIND.
Card 23
Question
BIOS
Answer
Basic Input/Output System.
A computers firmware used to manipulate different settings such as the date and time, boot drive, and access password.
UEFI is the designated replacement for BIOS.
Card 24
Question
BPA
Answer
Business Partners Agreement.
A writter agreement that details the relationship between business partners, including their obligations toward the partnership.
Card 25
Question
BYOD
Answer
Bring Your Own Device.
A policy allowing employees to connect personally owned devices, such as tablets and smartphones, to a company network.
Data security is often a concern with BYOD policies and organizations often use VLANs to isolate mobile devices.
Card 26
Question
CA
Answer
Certificate Authority.
An organisation that manages, issues, and signs certificates and is part of a PKI.
Certificates are an important part of asymmetric encryption.
Certificates include public keys along with details on the owner of the certificate and the CA that issed the certificate.
Certificate owners share their public key by sharing a copy of their certificate.
Card 27
Question
CAC
Answer
Common Access Card.
A specialized type of smart card used by the U.S. Department of Defense.
It includes photo identification and provides confidentiabilty, integrity, authentication and non-repudiation for the users.
It is similar to a PIV.
Card 28
Question
CAN
Answer
Controller Area Network.
A standard that allows microcontrollers and devices to communicate with each other without a host computer.
Card 29
Question
CAPTCHA
Answer
Completely Automated Public Turing Test to Tell Computers and Humans Apart.
Technique used to prevent automated tools form interacting with a web site.
Users must type in text, often from a slightly distored image.
Card 30
Question
CAR
Answer
Corrective Action Report.
A report used to document actions taken to correct an event, incident, or outage.
Card 31
Question
CCMP
Answer
Counter Mode with Cipher Block Chaining Message Authentication Code Protocol.
An encryption protocol based on AES and used with WPA2 for wireless security.
It is more secure than TKIP, which was used with the original release of WPA.
Card 32
Question
CCTV
Answer
Closed-circuit television.
This is a detective control that provides video surveillance.
Video surveillance provides reliable proof of a persons location and activity.
A physical security control that can increase the safety of an organizations assets.
Card 33
Question
CERT
Answer
Computer Emergency Response Team.
A group of experts who respond to security incidents.
Also known as a CIRT, SIRT, or IRT.
Card 34
Question
CHAP
Answer
Challenge Handskake Authentication Protocol.
Authentication mechanism where a server challengs a client.
More secure than PAP and uses PPP.
MS-CHAPv2 is an improvement over CHAP and uses mutual authentication.
Card 35
Question
CIA
Answer
Confidentiality, Integrity and Availability.
Form the security triad.
Confidentiality helps prevent the unauthorized disclosure of data.
Integrity provides assurances that data has not been modified, tampered with, or corrupted.
Availability indicates that data and services are available when needed.
Card 36
Question
CIO
Answer
Chief Information officer.
A "C" level executive position in some organizations.
A CIO focuses on using methods within the organization to answer relevant questions and solve problems.
Card 37
Question
CIRT
Answer
Computer Incident Response Team.
A group of experts who respond to security incidents.
Also known as CERT, SIRT, IRT.
Card 38
Question
COOP
Answer
Continuity Of Operatings Planning.
COOP sites provide an alternate location for operations after a critical outage.
A hot side includes personnel, equipment, software, and communication capabilities of the primary site with all the data up to date.
A cold site will have power and connectivity needed for COOP activation, but little else.
A warm site is a compromised between a hot site and a cold site.
Mobile sites do not have dedicated locations, but can provide temporary support during a disaster.
Card 39
Question
CP
Answer
Contingency Planning.
Plans for contingencies in the event of a disaster to keep an organization operational.
BCPs include contigency planning.
Card 40
Question
CRC
Answer
Cyclical Redundancy Check.
An error detection code used to detect accidental changes that can affect the integrity of data.
How to use this set
Read the preview and check whether the content and answers suit your learning goal. You can add the public set to your sets to study it. Your account shows the available actions.