1
Q
Computer Architecture
A
- Engineering branch primarily involved in designing and developing computer systems.
2
Q
Hardware
A
- Hardware refers to physical/tangible components of a computer.
3
Q
Processor
A
- It is a chip or set of chips that dictates and integrates all the major computer functions.
4
Q
Name Execution Types
A
- Multitasking
- Multicore
- Multiprocessing
- Multiprogramming
- Multithreading
5
Q
Multitasking
A
- Performing two or more tasks at the same time.
6
Q
Multicore
A
- Term used for today’s CPUs as their chips have multiple cores that work at the same time.
7
Q
Multiprocessing
A
- In computing, multiprocessing refers to the use of multiple CPUs in order to generate more power and perform multiple operations.
8
Q
What is Symmetric Multiprocessing?
A
- Several processors within a single computer are sharing the same operative system.
9
Q
What is Massively Parallel Processing?
A
- Processing that involves hundreds of processors using their own operating systems.
10
Q
Multiprogramming
A
- It is a rather obsolete form of parallel processing that uses a single processor to perform multiple tasks at the same time.
- Since there is only one processor, execution of these tasks is pseudo simultaneous.
11
Q
Multithreading
A
- In computing, it is a term that refers to several simultaneous tasks to be performed in a single process.
12
Q
Single State System
A
- System that processes only one security level at a given time.
13
Q
Multistate System
A
- System that processes several security levels at the same time.
14
Q
List Protection Mechanisms
A
- Protection Rings
- Operational State
- Security Mode
15
Q
Protection Rings
A
- Method by which code and operating system components are organized in concentric rings in order to separate levels of interaction and protect data.
- The highest privilege is within the innermost ring.
16
Q
Process States
A
- In computing it is a term that refers to different forms of operation in which processes are run and executed.
17
Q
List All The Possible States for A Running Process
A
- Ready State
- Waiting State
- Running State
- Supervisory State
- Stopped
18
Q
Ready State
A
- Process is ready to continue or begin.
19
Q
Waiting State
A
- Process is halted due to an external condition.
20
Q
Running State
A
- CPU is executing the process.
21
Q
Supervisory State
A
- State to be used when the process in order to ru requires higher privilege than its current.
22
Q
Stopped State
A
- Terminated process due to finishing the task or lacking the needed resources.
23
Q
Security Modes
A
- Modes created by the US government for processing classified data.
24
Q
Name Four Security Modes
A
- Dedicated Mode
- System High Mode
- Compartmented Mode
- Multilevel Mode
25
What are the Two Operating Modes?
* User Mode
* Privileged Mode
26
User Mode
* Basic mode for CPU operations in which only one part of the whole set of instructions is being run.
* This mode is designed to minimize potential accidental damage that can be created.
27
Privileged Mode
* Basic mode for CPU operations in which the whole set of instructions is being run.
28
Memory
* Collection of all data computer needs to keep in store.
29
Read-Only Memory (ROM)
* Type of computer memory that cannot be modified.
30
Programmable Read-Only Memory (PROM)
* Similar to ROM, but the program is not "burned in" rather it allows the final user to burn in the content later after which the content cannot be changed.
31
Erasable Programmable Read-Only Memory
* It is a programmable read only memory programmable ROM that can be erased and reused.
32
Electronically Erasable Programmable Read-Only Memory
* It is a programmable read only memory programmable ROM that can be erased by using electric voltage.
33
Flash Memory
* Memory that can be erased electronically and subsequently rewritten.
34
Random Access Memory
* It is a form of computer data storage that stores data and machine code currently being used.
35
Real Memory
* Largest RAM storage.
36
Cache RAM
* Cache RAM is a smaller, faster memory which stores copies of the data that are more likely to frequently used.
37
Dynamic RAM
* It is a type of random access memory that stores each bit of data in a separate tiny capacitor that is contained within a circuit.
38
Static RAM
* It is a type of random access memory that stores each bit using a flip flop device that represents a switch to be positioned from 1 to 0 or vice versa.
39
Registers
* Limited CPU memory required for arithmetic-logical unit to operate.
40
Memory Addressing
* Assigning memory address so that particular locations are easier to access.
41
Register Addressing
* Assigning register address so that particular locations are easier to access..
42
Immediate Addressing
* A way to refer to data while being provided to CPU in the form of instructions.
43
Direct Addressing
* Supplying CPU with an actual memory location address.
44
Secondary Memory
* Term that refers to memory storage on devices other than the CPU.
45
Data Storage Devices
* Devices that store data that can be used on a computer.
46
Primary Storage
* It essentially refers to RAM
47
Secondary Storage
* Term that refers to memory storage on devices other than the CPU such as flash drives,CDs, DVDs.
48
Volatile Storage
* Data storage devices created to lose the data like RAM.
49
Nonvolatile Storage
* Data storage devices created to retain the data.
50
Random Access Storage Devices
* Devices that let an operating system access the data stored at any point within the system.
51
Sequential Storage Devices
* Devices that do not let an operating system access the data stored at any point within the system but rather all the data need to be processed until the desired point.
52
Secondary Devices Storage Media Security Issues
* Data may remain on a secondary device even after being erased
* Secondary storage devices are prone to theft
* Access can be fairly easy for some devices
53
Monitor Security
* Security of the data displayed on a monitor can be compromised by technologies such as TEMPEST.
54
Printer Security
* Shared printers can lead to security problems as printout often may be forgotten.
55
Keyboards/Mice Security
* Devices can be put into keyboards so that they record keystrokes and transmit them to a receiver.
56
Modems Security
* There are numerous way by which unauthorized users can create access to a modem.
57
Firmware
* Permanent software programmed into a read-only memory.
58
BIOS
* Basic input/output system is a type of firmware microprocessor uses to get the computer system upon the computer is turned on.
59
UEFI
* Unified Extensible Firmware Interface is a software interface between an operating system and hardware and it is expected to replace BIOS.
60
Applets
* Small programs that work independently from their server.
61
Name Two Applet Types
* Java Applets
* ActiveX Controls
62
Local Caches
* Temporary stored information of a particular client.
63
Data Flow Control
* Monitoring data transfer between processes, devices, and networks.
64
Aggregation
* Combination of data records in order to gather more useful information.
65
Inference
* Combination of nonsensitive data records in order to gather more useful information and get access to more sensitive information.
66
Data Mining
* Analysing large databases in order to find certain correlations.
67
Metadata
* A set of data that describes and gives information about other data.
68
Data Analytics
* Examining large sets of data in order to extract useful information.
69
Parallel Data Systems
* Computing systems that perform a great number of operations simultaneously.
70
List Two Types of Parallel Data Processing
* Symmetric
* Asymmetric
71
Host-Terminal Model
* Model where all functions and data are contained within one centralized system and users are physically distributed.
72
Client-Server Models
* Model where users operate independent computers but can access resources on networks servers.
73
Cloud Computing
* Type of computing that uses a network of remote servers on the Internet to store, manage, and process data instead of a local server.
74
Hypervisor
* Is a virtual machine monitor (VMM) that creates and runs virtual machines.
75
Private Cloud
* Cloud within an organization's network that is separated from the internet.
76
Public Cloud
* Cloud available to the general public on internet.
77
Hybrid Cloud
Combination of private and public clouds.
78
Community Cloud
* Cloud shared by a group of users or organizations.
79
Grid Computing
* It is a computer network with a central management system in which each computer's resources are shared with every other computer in the system.
80
Peer to Peer Technologies
* Concept similar to grid computing, as the workload is shared among users.
* However, there is no central management system.
81
The Internet of Things
* Concept that refers to interconnection computing devices embedded in everyday objects/appliances, enabling them to send and receive data over the internet.
82
Industrial Control System
* Devices that manage industrial machines and processes.
83
Metacharacters
* Characters that have a special meaning in programming that regular characters do not have.
84
Directory Traversal
* Type of an attack that allows an attacker to access any part of the file/system once it is in a root directory.
85
Command Injection
* It is a type of an attack in which the goal is execution of commands on the host operating system through a vulnerable application.
86
Device Security
* Wide range of security features available on a mobile device.
87
Remote Wiping
* In the context of security, it is the ability to delete data on a device remotely in case the device is stolen.
88
Lockout
* Device gets locked out in case the user fails to provide correct authorized credentials after several attempts.
89
Screen Locks
* Layer of security that prevents someone of just picking up the device and accessing its contents.
90
What Does GPS Stand For?
* Global Positioning System
91
Application Control
* Device management option that restricts applications that can be installed on a device.
92
Storage Segmentation
* Artificial groping of data stored on a medium.
93
Asset Tracking
* Management option used to track resources/inventory. Can be either active or passive.
94
Inventory Control
* It is a set of hardware and software based tools that automate the process of tracking inventory.
95
Mobile Device Management
* It is a term used to describe management of all mobile devices organization's employees are using to access its resources.
96
Device Access Control
* Term that encompasses passwords and storage encryption.
97
Removable Storage
* Storage devices that can be physically removed from a mobile device such as a microSD card.
98
List Ways in Which Application Security is Ensured
* Key Management
* Credential Management
* Authentication
* Geotagging
* Encryption
* Application Whistling
99
Geotagging
* GPS on a mobile device allows for tagging of photos so one has to be aware of potential security issues due to this feature.
100
Application Whistling
* It is a security option also known as deny by default as it blocks unauthorized application form operating on a mobile device.
101
What Does BYOD Stand For?
* Bring Your Own Device.
* It refers to employees using their own devices to connect to organization's network.
102
What Does COPE Stand For?
* Company-owned, personally enabled devices.
103
What Does CYOD Stand For?
* Choose your own device
104
Antivirus Management
* Policy that dictates whether mobile antivirus programs can be installed on a mobile devices and which ones.
105
Mobile Device On-boarding
* Installing all the security and management applications through secure settings.
106
Mobile Device Off-boarding
* Removal of all the business related data from a mobile device.
107
Embedded System
* Computer embedded in greater computer system
108
Static System
* Refers to a static environment, static conditions that do not change. It is a system that is to stay unaltered by the administrators and users.
109
Network Segmentation
* Network is isolated from all outside communications so communication happens only within segmented network users.
110
When are Security Layers Used?
* They are when data that is being used belong to different classification levels
111
Application Firewall
* It is a system filter that defines a set of communication rules for all the users.
112
Network Firewall
* Device used for network filtering.
113
Wrapper
* It is program used provide a layer of security to computer services and determine whether the service is authorized to execute..
114
Five Types of Technical Mechanisms
1. Layering
2. Abstraction
3. Data Hiding
4. Process Isolation
5. Hardware Segmentation
115
List Policy Mechanisms
* Principle of Least Privilege
* Separation of Privilege
* Accountability
116
Covert Channels
* Paths that are not normally used in communication
117
List Two Types of Cover Channels
* Covert Timing Channels
* Covert Storage Channel
118
Overt Channels
* Known and expected channel of communication.
119
Trusted Recovery
* System that ensures that all security controls remain intact in case of an attack.
120
Maintenance Hooks
* Entrance points into a system with which only developer is familiar with.
121
Incremental Attacks
* Security attacks that happen in a gradual fashion.
122
Data Diddling
* Attacker enter a system and makes small gradual changes.
123
Salami Attacks
* Salami attack refers to small attacks add up to one major attack that can go undetected.
124
125
126
127
128
CISSP - 09 - Network Traffic
flashcards
Decks in class (1)
# Cards
