Threat Security+ Management Terms and Concepts Flashcards

Front

Define 'rootkit'.

Back

A rootkit is a collection of computer software, typically malicious, designed to enable access to a computer or an area of its software that is not otherwise allowed and often masks its existence or the existence of other software.

Front

Define phishing.

Back

Phishing is a type of social engineering attack often used to steal user data, including login credentials and credit card numbers.

Front

Define the term 'attack vector'.

Back

An attack vector is a path or means by which a hacker can gain access to a computer or network server to deliver a payload or malicious outcome.

Front

Explain the term 'exploit'.

Back

An exploit is a piece of software, a chunk of data, or a sequence of commands that takes advantage of a bug or vulnerability in order to cause unintended or unanticipated behavior to occur.

Front

Explain threat hunting.

Back

Threat hunting is a proactive cybersecurity search through networks and endpoints to find malicious actors that have evaded existing security solutions.

Front

List the steps in the vulnerability management process.

Back

The steps are identification, evaluation, treatment, and reporting.

Front

Name a common source of threat intelligence.

Back

Common sources include open-source intelligence (OSINT), commercial threat intelligence providers, and internal threat data.

Front

What are indicators of compromise (IoCs)?

Back

IoCs are pieces of data that indicate a potential breach or malicious activity within a network or system.

Front

What is a botnet?

Back

A botnet is a number of internet-connected devices, each of which is running one or more bots. Botnets can be used to perform distributed denial-of-service attacks (DDoS).

Front

What is a false negative in threat detection?

Back

A false negative occurs when malicious activity is not detected by the security systems.