Defense in Depth is a security strategy that involves __________ layers of defense to protect an organization's assets.

Acceptable Use Policy (AUP) defines the __________ behavior for personnel regarding the use of the organization's resources.

A Service Level Agreement (SLA) defines the __________ provided to a client, including support expectations and liability.

Automation is often enhanced through __________, which allows specific tasks to be performed automatically under certain conditions.

Scalability refers to the ability of a computing environment to gracefully fulfill its ever-increasing __________ needs.

Elasticity allows a computing environment to adjust its resources in response to both increasing and decreasing __________.

Redundancy ensures that a system has additional __________ to maintain operations in the event of a failure.

Fault Tolerance enables a system to continue providing service despite the failure of certain __________.

Cloud Computing refers to the delivery of computing services over the __________, offering flexibility and economies of scale.

SAAS (Software as a Service) provides users with cloud-based __________ without the need for installation or maintenance.

PAAS (Platform as a Service) provides users with __________ platforms for building, testing, and deploying applications.

IAAS (Infrastructure as a Service) provides users access to physical or virtual computing infrastructure such as __________.

CapEx (Capital Expenditure) involves upfront spending on physical infrastructure, while OpEx (Operational Expenditure) involves spending on products or services as a __________ model.

Identity and Access Management (IAM) is a process for managing identity, __________, and authorization for organizational assets.

Multi-Factor Authentication (MFA) enhances security by combining multiple __________ methods for access.

Provisioning refers to the process of _________ access rights to users within a system.

Rule-Based Access Control (RBAC) determines access based on predefined _________ such as time of day or location.

A Retinal Scanner scans the blood vessels in the retina, which are unique and rarely change except due to _________ or injury.

A Common Access Card (CAC) is used by DoD personnel for secure, _________-based authentication.

Active Directory (AD) is a service that stores _________ information and manages access in a networked environment.

Single Sign-On (SSO) allows users to log in once and gain access to multiple systems without needing to _________.

Tunneling is a data transport technique that encrypts and _________ data within another data packet for secure transmission.

A One-Time Password is generated using an algorithm that applies a _________-based message authentication code for security.

The Challenge Handshake Authentication Protocol (CHAP) is used to control access to _________ servers through encrypted authentication.

Identification, Authentication, Authorization, and Accounting are key processes for controlling and tracking access to __________.

Kerberos is an authentication protocol that uses time-sensitive __________ to grant access to systems.

Privileged User Accounts have more __________ than regular user accounts, which makes them attractive targets for attackers.

Group Policy Objects (GPOs) in Active Directory are used to manage the __________ and configuration of user accounts and systems.

SAML and SPML are both standards for managing user __________ and access in distributed environments.

A Trusted Platform Module (TPM) is a hardware-based specification for generating and storing __________ securely.

Endpoint Security ensures that only authorized devices can connect to a network and addresses potential __________ at these endpoints.

Endpoint Detection and Response (EDR) continuously monitors endpoint activity for security __________ and can respond accordingly.

Log Monitoring automates the review of logs to identify potential __________ behavior in the system.

Host Vulnerabilities refer to security weaknesses in the ___ systems of a network.

Patch Management is the process of regularly updating software to address ___ and improve security.

Type 1 Hypervisors run directly on hardware, while Type 2 Hypervisors require a ___ operating system to manage virtual machines.

Privilege Escalation occurs when an attacker exploits vulnerabilities to gain higher-level ___.

Data in Transit Encryption ensures that information being transmitted over a network is encrypted to protect it from ___.

Symmetric Encryption uses the same key for both ___ and decryption.

Asymmetric Encryption uses a pair of keys (one public, one private) for ___ and decryption.

A Digital Signature provides authentication of a message by using the sender’s ___ key.

Collisions in Cryptography occur when two different inputs produce the same ___ in a hash function.

Rainbow Tables are precomputed tables used to reverse cryptographic ________ functions, making password cracking faster.

The Key Elements of PKI (Public Key Infrastructure) include __________ authorities, digital certificates, and certificate revocation lists.

In PKI, the Realm of Trust refers to the relationship between entities that trust a __________ certificate authority.

For a company with 99 employees, the number of keys required for Symmetric Encryption would be __________.

Certificates in PKI are typically issued in a standard format called __________.

In PKI, the main difference between a CRL (Certificate Revocation List) and OCSP (Online Certificate Status Protocol) is that CRL provides a list of revoked certificates, while OCSP checks the __________ of a single certificate.

Wildcard Certificates are used to secure multiple __________ within the same domain.

S/MIME is a standard for securing __________ communications using encryption and digital signatures.

TLS (Transport Layer Security) provides encryption for __________ communications, securing data in transit.

Steganography hides information within __________ media such as images or audio files.

A Brute Force Key Attack in cryptography involves trying all possible __________ until the correct one is found.

Clipping Level refers to a threshold for triggering an alert or lockout after multiple __________ attempts.

The Birthday Attack is a cryptographic technique that exploits the mathematics of __________ functions to find collisions.

The Avalanche Effect in cryptography describes how a small change in input drastically changes the resulting __________.