Sec+ | Important Notes

Match the Security Control to its purpose

• SIEM

• Software that automates a response when set up

• Network Access Control (NAC)

• Stops sensitive data exfiltration

• Intrusion Prevention System (IPS)

• Software that detects and STOPS an attack in real-time

• Data Loss Prevention (DLP)

• Security technologies that work together to screen devices for health conditions before accessing a network

• SOAR

• Software that Aggregates log data and acts as workforce multiplier

Match the tool that is used for the provided purpose:

• Wireshark (PCAP)

• Best way to see internal to external conversations between computers

• Tabletop Exercise (TTX)

• Best way to test your Incident Response Plan (IRP)

• Mobile Device Manager (MDM)

• Best way to control company data on a laptop or cellular phone.

• Firewall Logs

• Best way to store credit card data in a database is to replace it with a placeholder.

• Data Tokenization

• Best tool to use to capture data packets going between computers.

Match the following:

• Business Impact Analysis (BIA)

• Best way to transfer risk involved with a security incident.

• Compliance Attestation

• A report provided by a vendor stating that we meet certain regulatory requirements

• Playbook

• A policy that outlines how long we must store and maintain data

• Cyber Insurance

• Step by step guide to responding to a security incident

• Data Retention

• Report that shows how things are affected when a security incident happens.

Match the regulatory laws to their definition.

• ISO 27002

• Supporting document that provides security controls to orgs that are required to have ISMS.

• General Data Privacy Regulation (GDPR)

• Requires companies handle PII in a manner that keeps it private.

• ISO 27001

• Privacy law that applies to European Citizens regarding their privacy rights.

• PCI DSS

• Requires an organization to set up an ISMS if they deal with sensitive info.

• ISO 27701

• Law that governs how an organization handles credit/debit card data.

Match the following terms to their appropriate definitions.

• Recovery Time Objective (RTO)

• This is the maximum amount of time equipment can be down.

• Annual Loss Expectancy (ALE)

• This is the maximum amount of data that can be lost.

• Single Loss Expectancy (SLE)

• The amount of money we can expect to lose in a given year due to events occurring.

• Recovery Point Objective (RPO)

• The amount of money we can expect to lose if something occurs.

• Annual Rate of Occurrence (ARO)

• The number of times something happens in a given year.

Match the appropriate solution with the problem.

• Data Loss Prevention (DLP)

• Jon needs a tool that will help him identify if anything in a file system has changed.

• Cloud Access Security Broker (CASB)

• Terry wants to enforce security policies on the cloud.

• File Integrity Monitoring (FIM)

• Mandy needs to create a way to rollback to a previous point if something goes wrong.

• Gap Analysis

• Sierra wants to prevent employees from sending sensitive info in email.

• Backout Plan

• Dameon needs to determine everything that needs to be done to get into compliance.

Match the following documents to their purpose

• BCP

• A formal document that an employee signs to ensure they understand what they are allowed to use an asset for.

• BIA

• A plan that we put into place to maintain continuity in the event of a disaster or attack.

• SLA

• Legal agreement between two parties that outlines service requirements. Often denotes 99.9% uptime.

• SOW

• A complete analysis on how a situation or event would impact the organization.

• AUP

• 
  A plan that outlines scope of a job, the completion timeline and the cost.

Match the cryptography terms to their definitions

• Encryption

• A third party that holds cryptographic keys for you for safety and ease of access

• Hash

• Defeats a rainbow table by adding random characters to a data structure before its hashed

• Key Escrow

• A 2-step process of turning plain text data into cipher, then back into plain text for data privacy

• Key

• A cryptographic technology that assigns a unique code to a data structure "fingerprinting" it

• Salt

• A set of instructions for turning plain text data into cipher text data

Match the compliance terms to their definitions

• Chain of Custody

• The process of collecting digital evidence for preservation

• Digital Forensics

• A preservation order issued by a law enforcement agency

• Legal Hold

• A report on how effective a companies security controls are

• SOC II Type II

• A company who does not follow the required laws is this

• Non-Compliance

• A document that outlines who was been in contact with digital evidence

Match the threat actors to their definitions

• Criminal

• Using an unauthorized software program in a company that the IT's don't know about

• Hacktivist

• Revenge/retaliation on a company they work at

• State Actor

• Attacks based on their personal beliefs

• Insider Threat

• Attacks because they want to gain money by selling data

• Shadow IT

• An advanced threat that works for a government