1 Security Operations Foundations Free Online FlashCards

What is the practical aim of security operations?

Security operations manage cybersecurity risk and help keep important services dependable; eliminating every possible threat is unrealistic.

What are the six functions of NIST CSF 2.0?

Govern, Identify, Protect, Detect, Respond, and Recover. These functions are connected and continuous, not a one-way checklist.

What is the principle behind defense in depth?

Defense in depth uses complementary safeguards so one control's failure does not automatically expose an important asset.

What does cybersecurity risk describe?

Risk is potential harm to an organization, its people, or its operations when a threat exploits a weakness.

What must be established before a security practice test?

Test only systems you own or have explicit permission to test. Define the scope and rules of engagement beforehand, including included systems, allowed activities, and when testing must stop.

What three information goals are commonly called the CIA triad?

Confidentiality, integrity, and availability.

What does the Govern function do?

Govern sets cybersecurity strategy, expectations, roles, and policy.

What does the Identify function establish?

Identify builds understanding of assets, dependencies, threats, and risks.

What is the purpose of the Protect function?

Protect applies safeguards to reduce risk.

How do Detect and Respond differ?

Detect finds and analyzes possible attacks or compromises; Respond contains and manages incidents.

What outcome does the Recover function support?

Recover restores affected systems and operations.

What are five common layers of defense in depth?

Layers can include people and policy, identity and access, devices and software, networks and facilities, and monitoring and response.