1
Q
Cloud security - resource policies and permissions
A
This is defined as who can accses something and what actions can be performed
2
Q
What is service management?
A
This is Like HSM and stores manages and rotates (API keys, cerficates, SSH keys, Passwords)
Security+ exam
flashcards
Decks in class (74)
# Cards
-
Secure Protocols24
-
Symmetric vs Asymmetric12
-
Encryption and stenography9
-
PKI concepts15
-
Keys10
-
IPsec6
-
Authentication and Authorization11
-
Authentication methods8
-
Biometrics5
-
Pap and CHAP4
-
EAP and 802.1x9
-
Radius and Tacacs5
-
Keberos10
-
Account Management-Account Types5
-
Password Policies2
-
Account polices4
-
Application Security13
-
Physical security7
-
Wireless Security13
-
Secure Data destruction14
-
Hardening7
-
Mobile Device managment8
-
Mobile Device management and enforcement14
-
Network segmentation6
-
VPNs10
-
Proxies7
-
Port security6
-
Firewalls5
-
Virtualization8
-
Cloud concepts9
-
Cloud services4
-
Cloud Models5
-
Computing Types6
-
Cloud security2
-
Hardware redundancy8
-
Site redundancy3
-
Non-persistance concepts3
-
Backup and Restore6
-
Network recon13
-
Vulnerability scans8
-
SIEM and SOAR systems5
-
Penetration testing8
-
Penetesting exercise types6
-
Digital Forensics6
-
Investigative data sources1
-
Incident response process7
-
Incident response plans4
-
Attack frameworks4
-
Security Controls3
-
Regulations, Standards, and frameworks11
-
GDPR9
-
Personal in OSP3
-
OSP- 3rd party risk5
-
data policies3
-
OSP- other areas3
-
Risk managment concepts5
-
Risk Management - Types and strategies3
-
Risk Analysis5
-
business impact analysis14
-
Privacy and Data Sensitivity Breach and Data types7
-
Privacy enhancing technologies13
-
Privacy data roles and responsibility12
-
Privacy and data sensitivity - other areas4
-
Social engineering17
-
malware45
-
Network attack - Layer 2 attack5
-
DoS and DDoS attacks7
-
MiTM and MiTB attacks2
-
Wireless attacks11
-
OSINT3
-
THreat actors and vectors10
-
cryptography7
-
encryption and stenography5
-
Hashing9
