201-250 Cybersecurity Concepts

Front

Resilience

Back

The ability of a system or network to recover quickly from failure events with no or minimal manual intervention.

Front

Selection of effective controls

Back

The process of choosing the type and placement of security controls to ensure the goals of the CIA triad and compliance with any framework requirements.

Front

Defense in depth

Back

Security strategy that positions the layers of diverse security control categories and functions as opposed to relying on perimeter controls.

Front

Device placement

Back

Considerations for positioning security controls to protect network zones and individual hosts to implement a defense in depth strategy and to meet overall security goals.

Front

Passive security control

Back

An enumeration, vulnerability, or incident detection scan that analyzes only intercepted network traffic rather than sending probes to a target. More generally, passive reconnaissance techniques are those that do not require direct interaction with the target.

Front

Active security control

Back

Detective and preventive security controls that use an agent or network configuration to monitor hosts. This allows for more accurate credentialed scanning, but consumes some host resources and is detectable by threat actors.

Front

Inline

Back

Placement and configuration of a network security control so that it becomes part of the cable path.

Front

Sensor

Back

A monitor that records (or 'sniffs') data from frames as they pass over network media, using methods such as a mirror port or TAP device.

Front

SPAN (switched port analyzer)/mirror port

Back

Copying ingress and/or egress communications from one or more switch ports to another port. This is used to monitor communications passing over the switch.

Front

Test access point (TAP)

Back

A hardware device inserted into a cable run to copy frames for analysis.