Entry level cybersecurity vocabulary covering security principles, network security, and incident response tested on the ISC2 Certified in Cybersecurity exam.
40 cards · basic cards · AI-written, checked twice. Edit anything.
- What are the three components of the CIA Triad?
- Confidentiality, Integrity, and Availability
- Define Confidentiality in information security
- Ensuring that information is not disclosed to unauthorized persons or processes
- Define Integrity in information security
- Assuring that data has not been altered or destroyed in an unauthorized manner
- Define Availability in information security
- Ensuring that systems and data are accessible to authorized users when needed
- What is Authentication?
- The process of verifying the identity of a user, device, or system
- What is Authorization?
- Granting or denying access rights to a user or system that has been authenticated
- What is Identification?
- The process of providing a unique identifier to claim an identity
- What is Accounting or Audit in security?
- Recording and reviewing user and system actions to track what has been done
- What is the Principle of Least Privilege?
- Users and processes are granted only the minimum access necessary to perform their job
- What is Defense in Depth?
- Using multiple layers of security controls to protect systems and data
- What is Separation of Duties?
- Dividing critical tasks among multiple people to prevent fraud and errors
- What is the Need to Know principle?
- Access to information is limited to those who require it to perform their duties
- Define Risk in cybersecurity
- The probability that a threat will exploit a vulnerability causing harm to an asset
- Define Threat in cybersecurity
- Any circumstance or event with the potential to harm an asset
- Define Vulnerability in cybersecurity
- A weakness in a system that could be exploited by a threat