Question

Lesson 2 – Cybersecurity Terminology

Term / Concept

1. 2FA (2-Factor Authentication)

2. APT (Advanced Persistent Threat)

3. Breach

4. Cyberattack

5. Data breach

6. Endpoint security

7. Hardening

8. IDS (Intrusion Detection System)

9. Least privilege

10. Malware

11. Patch management

12. Penetration testing

13. Proxy server

14. Risk

15. Security policy

16. Social engineering

17. Threat

18. Threat vector

19. Trusted network

20. Vulnerability

Description / Definition

1. Requires two pieces of evidence or credentials to gain access to an account or other secure/restricted area.

2. A set of hacking processes targeting a specific entity –usually nations or organizations attacking for business or political motives.

3. An incident that results in the disclosure or exposure of data.

4. Internal data being made accessible to external entities without authorization.

5. Protecting a corporate network from access by end users and remote devices.

6. An attacker executes malicious programs on a compromised system

7. Identifying and fixing vulnerabilities on a system.

8. A security system that gathers, analyzes and reports on possible security breaches in progress

1. Assigning users the least amount of permissions necessary to perform their function.

10. Any type of program used to perform malicious actions

11. An activity of researching, testing, approving and installing updates to computer systems.

12. An authorized, simulated attack exercise that evaluate the security of IT infrastructures.

13. A server that intercepts client requests and forwards them to another server.

14. The product of the level of threat with the level of vulnerability that indicates the likelihood of a successful attack.

• Rules specifying or regulating how an organization’s security services to protect sensitive and critical resources.

16. A cyber-attack to deceive victims into taking an action that places a victim at risk.

17. The potential that a circumstance, capability, action, or event could breach security and cause harm.

18. The method a threat uses to get to a target.

19. The private network a firewall primarily protects.

20. A flaw that creates the opportunity for an unauthorized access and attack.

Match

1. A

2. D

6. E

7. G

8. H

9. I

10. J

11. K

12. L

13. M

15. O

19. S

20. T

Missing numbers # 3, 4, 5, 14, 16,17,18

Answer 1

2FA (2-Factor Authentication)	Requires two pieces of evidence or credentials to gain access to an account or other secure/restricted area.
APT (Advanced Persistent Threat)	A set of hacking processes targeting a specific entity –usually nations or organizations attacking for business or political motives.
Breach	Internal data being made accessible to external entities without authorization.
Cyberattack	An attacker executes malicious programs on a compromised system
Data breach	An incident that results in the disclosure or exposure of data.
Endpoint security	Protecting a corporate network from access by end users and remote devices.
Hardening	Identifying and fixing vulnerabilities on a system.
IDS (Intrusion Detection System)	A security system that gathers, analyzes and reports on possible security breaches in progress
Least privilege	Assigning users the least amount of permissions necessary to perform their function.
Malware	Any type of program used to perform malicious actions
Patch management	An activity of researching, testing, approving and installing updates to computer systems.
Penetration testing	An authorized, simulated attack exercise that evaluate the security of IT infrastructures.
Proxy server	A server that intercepts client requests and forwards them to another server.
Risk	The product of the level of threat with the level of vulnerability that indicates the likelihood of a successful attack.
Security policy	Rules specifying or regulating how an organization’s security services to protect sensitive and critical resources.
Social engineering	A cyber-attack to deceive victims into taking an action that places a victim at risk.
Threat	The potential that a circumstance, capability, action, or event could breach security and cause harm.
Threat vector	The method a threat uses to get to a target.
Trusted network	The private network a firewall primarily protects.
Vulnerability	A flaw that creates the opportunity for an unauthorized access and attack.