Hardening, vulnerability management, SIEM, EDR, identity and access, and incident response phases.
40 cards · basic cards · AI-written, checked twice. Edit anything.
- What is hardening?
Show answer
Process of reducing attack surface by disabling unnecessary services and features
- What is a baseline configuration?
Show answer
Known secure state used as reference for system hardening
- Define least privilege principle
Show answer
Users should have minimum permissions needed for their role
- What is network segmentation?
Show answer
Dividing network into isolated zones to limit lateral movement
- What is patch management?
Show answer
Process of applying updates to fix security vulnerabilities
- What is secure configuration management?
Show answer
Maintaining hardened configurations across systems
- What is privilege escalation?
Show answer
Unauthorized gain of higher-level access rights
- What is a honeypot?
Show answer
Decoy system designed to detect unauthorized access attempts
- What is vulnerability scanning?
Show answer
Automated tool that probes systems to identify weaknesses
- What is vulnerability assessment?
Show answer
Systematic review to identify security weaknesses
- What is compliance scanning?
Show answer
Auditing systems against security baselines and standards
- What is remediation?
Show answer
Process of fixing identified vulnerabilities
- How is vulnerability remediation priority determined?
Show answer
By severity, exploitability, and asset value
- What is a false positive?
Show answer
Security alert for activity that is not actually a threat
- What does DLP stand for?
Show answer
Data Loss Prevention