Vulnerability Management

Question 1

Systematic practice of spotting and categorizing weakness in a system, network, or application that could potentially be exploited.

Answer 1

Identifying Vulnerabilities

Question 2

Automated method of probing networks, system, and applications to disaster potential vulnerabilities

Answer 2

Vulnerability Scanning

Question 3

Used to safeguard the software from being manipulated during it’s lifecycle.

Answer 3

Application Security

Question 4

Used to analyze an application’s source code without executing it.

Answer 4

Static Analysis

Question 5

Evaluates an application as it is being run to determine if there are any vulnerabilities in the application.

Answer 5

Dynamic Analysis

Question 6

Ensures that the libraries and components that the application depends on are secure and up-to-date.

Answer 6

Package Monitoring

Question 7

Continual process used to understand the threats faced by an organization

Answer 7

Threat Intelligent

Question 8

Continuous stream of data related to potential or current threats to an organization’s security

Answer 8

Threat Intel Feeds

Question 9

Intel that is collected from publicly available sources including reports, forums, news articles, blogs, and social media posts.

Answer 9

OSINT

Question 10

Threat intel feeds that are provided by commercial vendors, usually under a subcription service tyoe of business model

Answer 10

Proprietary or Third-party Feeds

Question 11

Term used to describe the ethical practice where a security researcher discloses information about vulnerabilities in a software, hardware, or online services

Answer 11

Responsible Disclosure

Question 12

System that provides a standardized way to uniquely identify and reference known vulnerabilities in software and hardware.

Answer 12

CVE

Question 13

Used as quantifiable metric to help a cybersecurity professional understand the exact % of an asset that is likely to be damaged or affected if a particular vulnerability is exploited

Answer 13

EF

Question 14

Strategies that identify, access, and address vulnerabilities in a system or network to strengthen an organization’s security posture.

Answer 14

Vulnerability Response and Remediation

Question 15

Apply software updates to fix security vulnerabilities

Answer 15

Patching

Question 16

Procuring insurance policies to mitigate financial losses from cyber incidents

Answer 16

Purchasing Cybersecurity Insurance Policies

Question 17

Dividing a network into smaller segments for improves security and performance.

Answer 17

Network Segmentation

Question 18

Temporarily relaxes security controls for operational business needs.

Answer 18

Exception

Question 19

Permanently waives controls for specific reasons such as when using a legacy system

Answer 19

Exemption

Question 20

Process of documenting and communicating details about security weaknesses identified in software or systems to the individuals or organizations responsible for addressing the issue

Answer 20

Vulnerability Reporting