AP®︎ Cybersecurity: Topic 4.3 Flashcards

Organizational rules, policies, and procedures that govern user behavior and security practices rather than directly filtering traffic or scanning files

A policy defining permissible, prohibited, and required uses of organization-owned devices

A policy defining requirements for creating, using, changing, and managing organizational passwords

A policy defining what software users may install, which applications are approved, and how users request additional software

Software that scans files for known malware signatures and quarantines and removes matching malicious files

A detectable characteristic pattern associated with a known malicious file or piece of code

Isolation of a suspected malicious file so it cannot operate normally or affect the rest of the system

A vendor-distributed software fix that closes known vulnerabilities; operating systems and applications must both be kept current

A small software update, often distributed to correct a known vulnerability

Software on one device that allows or denies its inbound and outbound network traffic according to firewall rules

An ordered set of firewall rules specifying which traffic to allow or deny

Inbound traffic arrives at the protected device; outbound traffic leaves the protected device

Evaluate rules from first to last, apply the first matching rule, and ignore all later rules

Direction, source or destination IP address or port, service, protocol, or application used to decide whether to allow or deny traffic