Security Tools

Question 1

SCAP

Answer 1

Security content automation protocol (SCAP) → standardized framework that allows different vulnerability scanners to identify and report the same vulnerability consistently, preventing duplicate or mismatched findings across tools.

Question 2

Security Benchmarks

Answer 2

Security benchmarks → documented best-practice configuration standards for systems and applications that define a secure baseline and help reduce misconfigurations across environments.

Question 3

Agent Check

Answer 3

Agent check → compliance assessment method where software installed on a device reports security posture details such as patch status, antivirus state, or configuration settings.

Question 4

Agentless Check

Answer 4

Agentless check → compliance assessment method that scans devices remotely without installed software, relying on network access or credentials but offering less detailed visibility.

Question 5

DLP

Answer 5

Data loss prevention (DLP) → security technology that monitors and controls sensitive data to prevent unauthorized access, sharing, or exfiltration through email, endpoints, or networks.

Question 6

SNMP

Answer 6

Simple network management protocol (SNMP) → protocol used to monitor and manage network devices by querying management information bases using object identifiers, typically communicating over user datagram protocol ports 161 and 162.

Question 7

MIB

Answer 7

Management information base (MIB) → structured database used by simple network management protocol that defines what device information can be monitored or managed.

Question 8

OID

Answer 8

Object identifier (OID) → unique numeric identifier used within a management information base to reference specific device metrics or configuration values accessed through simple network management protocol.

Question 9

SNMP Traps

Answer 9

Simple network management protocol traps → unsolicited alert messages sent by devices to a management system using user datagram protocol port 162 when predefined events or thresholds occur.

Question 10

NetFlow

Answer 10

NetFlow → network traffic analysis technology that uses probes to collect flow data and sends it to collectors, providing visibility into traffic patterns, bandwidth usage, and potential security incidents.