D430 Fundamentals of Information Security - Set 3 - Part 3

Correct Answer: Fuzzer

A fuzzer is a tool used to stress-test web applications by sending random or unexpected inputs to identify security vulnerabilities, helping developers and security teams uncover potential weaknesses.

Correct Answer: Principle of Least Privilege

The Principle of Least Privilege ensures that users are only granted the minimum level of access necessary to perform their tasks, reducing the risk of accidental or intentional misuse of systems and data.

Correct Answer: Man-in-the-middle attack

A man-in-the-middle attack involves an attacker intercepting and eavesdropping on a conversation between two parties, and potentially altering the communication without their knowledge.

Correct Answer: Detective control

Detective controls are designed to detect security incidents, such as unauthorized access or policy violations, and report them to administrators for further investigation and action.

Correct Answer: GLBA

The Gramm-Leach-Bliley Act (GLBA) governs the protection of customer financial information and requires financial institutions to explain their data-sharing practices to customers and safeguard their sensitive data.

Correct Answer: Security auditing

Security auditing involves the detailed examination of a system or network to identify misconfigurations, vulnerabilities, and potential security risks, allowing organizations to improve their overall security posture.

Correct Answer: ECC

Elliptic Curve Cryptography (ECC) is widely used for encrypting data in wireless communications and smart cards, providing a high level of security with smaller key sizes compared to other algorithms like RSA.

Correct Answer: Risk management

Risk management involves identifying, assessing, and prioritizing risks to an organization, followed by the implementation of controls to mitigate or reduce those risks, ensuring the organization's security.

Correct Answer: Cross-Site Scripting (XSS)

Cross-Site Scripting (XSS) attacks exploit vulnerabilities in web applications by embedding malicious scripts that are executed by unsuspecting users when they visit the affected website or page.

Correct Answer: FERPA

The Family Educational Rights and Privacy Act (FERPA) mandates the protection of student records and grants students certain rights over their educational information, including the right to access and request corrections.