A program you can install that will monitor an endpoint for you, and let you know about events that occur.

A configuration strategy you can use to observe behaviors of users and determine if they are doing anything they shouldn't be doing.

A program you can install that looks for intrusions and sounds the alarm when it finds one.

A program you can install that looks for intrusions, and provides an automated response when it finds one.

Aggregates log data into a timeline for analysis.

The primary concern of performing this is that it could cause a disruption to operations.

This is known as workforce multiplier, and it enhances automation and orchestration.

A cryptographic technology that we use to check the integrity of a data structure.

The best method to use to store credit card and debit card data in a database.

A technique used to hide data in an image file.

A new security regulation is released, our company should perform one of these to ensure we can meet it.

Company has a critical system they cannot remove. The system is EOL. They should use this.

This is an example of a physical security control.

We use this to verify the integrity of software that we want to download.

We can feed multiple logs into this and it will analyze them for us.

We sign one of these with our vendors to ensure they don't release our critical information.

We can look here to see a list of all computers our computers are talking to.

Collecting and duplicating digital evidence is known as this.

Tracking the handling of digital evidence is known done on this.

Insider threats exfiltrate data using this.

Motivated by personal beliefs

Motivated by financial gain

Motivated by intelligence/information

Motivated by revenge

A threat actor whose goal is residence

Best way to detect unpatched software in your systems

Place where we keep all known risks in our organization

Insider using software that the IT department is unaware of

Best way to protect all data on a company issued laptop

Best way to fix known vulnerabilities

Company wants to test its employees on clicking on bad links in email.

Quickest way to get a list of all vulnerabilities on your systems

Tool we can use to stop communications with high risk regions

Rule that says we must follow all laws based on where we operate

This is a special server dedicated to performing AAA functions.

Best place to test out malicious software to reverse engineer it.

Granting a user access to a resource is this.

Granting a user permissions on a resource is this.

Tracking what a user does while accessing a resource is this.

This controls email parameters based on whether or not the email passes the security/authentication checks.

Automated security controls that help with configuration of cloud security

A Sysadmin is disabling default accounts and removing unnecessary services on a server. What is this called?

This device protects against insecure communications on a single device.

This is a way to verify that a device meets security policies and requirements before granting it access to a network.

Specifically protects a web application software by filtering and monitoring web traffic.

Accommodates a LOW RTO, high cost

Accommodates a HIGH RTO, low cost

A chart that breaks down responsibilities between a CSP and a customer.

The document that lists the RTO and the RPO

Creating a false text file designed to attract the attention of an attacker is this.