Prems Slides Review 1.0

This information is gathered from open sources such as websites, social media, public records, news articles, and other publicly accessible data.

• RADIUS

• AAA

• OSINT

• FTP

A type of web security vulnerability that allows an attacker to perform actions on behalf of a user without their consent.

• Cross-Site Scripting

• Cross-Site Privilege Escalation

• Cross-Site Request Forgery

• Cross-Site Code Request

A legal process in which an organization or individual is required to preserve all relevant documents, data, and information that may be pertinent to a pending or anticipated legal case or investigation.

• Chain of Custody

• Data Owner

• Data Copying

• Legal Hold

A process that documents who has had access to evidence, when and where it was collected, and any changes or transfers made. The process is specifically used for integrity and authenticity of evidence.

• Data Copying

• Chain of Custody

• Legal Hold

• Data Management

A predefined set of guidelines, procedures, and instructions that outlines the actions to be taken during various stages of an incident.

• Playbook

• Training, Tactics and Procedures

• Incident Triage

• Threat Huntinh

A company wants to verify a users credentials without storing the actual sensitive data (the user's password) in plaintext. They want to use an option that will not allow an attacker to reverse engineer the original password. What should they use?

• Password Complexity

• Password Policy

• Password Encryption

• Password Hashing

A security solution that helps organizations extend their security policies and controls to the cloud.

• Encryption

• Data Loss Prevention

• Cloud Access Security Broker

• Security Access Secure Edge

A process used to protect the privacy of individuals by removing or modifying personally identifiable information (PII) from a dataset.

• Data Destruction

• Data Classification

• Data Anonymization

• Data Analyzing

Answer explanation

Data anonymization is a process used to protect the privacy of individuals by removing or modifying personally identifiable information (PII) from a dataset. The goal is to transform the data in such a way that it becomes challenging or impossible to identify specific individuals while still maintaining the overall utility and integrity of the dataset for analysis or research purposes.

The primary goal of this is to ensure that sensitive data is not disclosed to unauthorized users, whether intentionally or unintentionally.

• Data Loss Prevention

• Data Masking

• Data Discovery

• Data Anonymization

Answer explanation

DLP stands for Data Loss Prevention. It is a set of strategies, tools, and processes designed to protect sensitive information from unauthorized access, sharing, or leakage. The primary goal of DLP is to ensure that sensitive data is not disclosed to unauthorized users, whether intentionally or unintentionally. DLP solutions are commonly used by organizations to prevent data breaches, comply with privacy regulations, and safeguard intellectual property.

A branch of science that involves the collection, analysis, and preservation of electronic evidence to investigate and prevent digital crimes.

• Digital Watermarking

• Incident Triage

• Digital Forensics

• Data Recording