Question 1

Showing that the information produced is validated and true. It can also refer to whether the intelligence is of a general or specific nature.

Accepted Answer

accuracy

Question 2

A formal response setting out the plan to correct a defect in a system, such as a security vulnerability. This type of report or request may be implemented as part of a wider Failure Reporting.

Accepted Answer

Corrective Action Report

Question 3

Typically the job title of the person with overall responsibility for information assurance and systems security. Sometimes referred to as Chief Information Officer (CIO).

Accepted Answer

CISO

Question 4

Property of an intelligence source that ensures it produces qualified statements about reliability.

Accepted Answer

confidence level

Question 5

A type of security control that acts after an incident to eliminate or minimize its impact.

Accepted Answer

corrective control

Question 6

The process of investigating, collecting, analyzing, and disseminating information about emerging threats and threat sources.

Accepted Answer

CTI (cyber threat intelligence)

Question 7

A type of security control that acts during an incident to identify or record that it is happening.

Accepted Answer

detective control

Question 8

A type of security control that discourages intrusion attempts.

Accepted Answer

deterrent control

Question 9

In the security intelligence cycle, a phase in which information is published and presented to different audiences.

Accepted Answer

dissemination

Question 10

Not-for-profit group set up to share sector-specific threat intelligence and security best practices amongst its members.

Accepted Answer

ISAC (Information Sharing and Analysis Center)

Question 11

The process through which data generated in the ongoing use of information systems is collected, processed, analyzed, and disseminated.

Accepted Answer

security intelligence cycle

Question 12

The location where security professionals monitor and protect critical information assets in an organization.

Accepted Answer

security operations center

Question 13

A detailed description of the steps in a process to achieve the stated goal.

Accepted Answer

use case

Question 14

A formal classification of the resources and expertise available to a threat actor.

Accepted Answer

adversary capability

Question 15

A knowledge base maintained by the MITRE Corporation for listing and explaining specific adversary tactics, techniques, and procedures.

Accepted Answer

ATT&CK

Question 16

The points at which a network or application receives external connections or inputs/outputs that are potential vectors to be exploited by a threat actor.

Accepted Answer

attack surface

Question 17

A specific path by which a threat actor gains unauthorized access to a system.

Accepted Answer

attack vector

Question 18

Malicious software applications that are widely available for sale or easily obtainable and usable.

Accepted Answer

commodity malware

Question 19

A framework for analyzing cybersecurity incidents.

Accepted Answer

Diamond Model

Question 20

A model developed by Lockheed Martin that describes the stages by which a threat actor progresses a network intrusion.

Accepted Answer

kill chain

CSEC 1560 Week 1

2) A formal response setting out the plan to correct a defect in a system, such as a security vulnerability. This type of report or request may be implemented as part of a wider Failure Reporting.

3) Typically the job title of the person with overall responsibility for information assurance and systems security. Sometimes referred to as Chief Information Officer (CIO).

4) Property of an intelligence source that ensures it produces qualified statements about reliability.

5) A type of security control that acts after an incident to eliminate or minimize its impact.

6) The process of investigating, collecting, analyzing, and disseminating information about emerging threats and threat sources.

7) A type of security control that acts during an incident to identify or record that it is happening.

8) A type of security control that discourages intrusion attempts.

9) In the security intelligence cycle, a phase in which information is published and presented to different audiences.

10) Not-for-profit group set up to share sector-specific threat intelligence and security best practices amongst its members.

11) The process through which data generated in the ongoing use of information systems is collected, processed, analyzed, and disseminated.

12) The location where security professionals monitor and protect critical information assets in an organization.

13) A detailed description of the steps in a process to achieve the stated goal.

14) A formal classification of the resources and expertise available to a threat actor.

15) A knowledge base maintained by the MITRE Corporation for listing and explaining specific adversary tactics, techniques, and procedures.

16) The points at which a network or application receives external connections or inputs/outputs that are potential vectors to be exploited by a threat actor.

17) A specific path by which a threat actor gains unauthorized access to a system.

18) Malicious software applications that are widely available for sale or easily obtainable and usable.

19) A framework for analyzing cybersecurity incidents.

20) A model developed by Lockheed Martin that describes the stages by which a threat actor progresses a network intrusion.