CCSM Elite R82 flashcards

32 cards. Read the term and the definition here. The deck at the top of this page is optional.

Reference Monitor

An abstract access-control concept requiring that every subject access to every object be mediated, that the mechanism be tamper-proof, and that it be small enough to be verified.

Bell-LaPadula *-property

A confidentiality rule stating a subject may not write to an object at a lower classification than its own level, preventing leakage of high data to low channels.

Biba integrity model

An integrity model with no-read-down and no-write-up rules, ensuring subjects do not corrupt higher-integrity data and do not consume lower-integrity data.

Common Criteria EAL

Evaluation Assurance Level from EAL1 to EAL7 describing the depth of testing and verification applied to a product, not the product's feature richness or security quality.

Covert timing channel

A communication path where one party signals by modulating the timing or latency of shared resource use, observable by another party without direct data access.

SLE and ALE

Single loss expectancy equals asset value times exposure factor. Annualized loss expectancy equals SLE times the annualized rate of occurrence, giving expected yearly loss.

Residual risk

The risk remaining after controls have been applied and accepted by management; it must be documented against the organization's stated risk appetite.

RTO versus RPO

Recovery time objective is the maximum acceptable downtime before restoration. Recovery point objective is the maximum acceptable data loss measured in time.

Risk treatment options

Four standard responses to identified risk: mitigate by adding controls, transfer via insurance or contract, avoid by stopping the activity, or accept and monitor.

Data owner versus custodian

The owner classifies data and approves access based on business need. The custodian implements and operates the technical controls protecting that data.

Data remanence

Residual data left on storage media after nominal deletion or formatting; it requires overwriting, degaussing, cryptographic erase, or physical destruction to remove.

Data classification

Assigning data to categories such as public, internal, confidential, or restricted so that handling, retention, and protection requirements follow automatically.

Sanitization by media type

Magnetic drives may be degaussed or overwritten; flash storage needs cryptographic erase or destruction; optical and paper media require shredding or incineration.

ABAC

Attribute-based access control evaluates policies against attributes of subject, resource, action, and environment, enabling fine-grained and context-aware authorization decisions.

SAML versus OIDC

SAML 2.0 exchanges XML assertions for browser single sign-on. OpenID Connect adds an identity layer with JSON ID tokens on top of OAuth 2.0.

Kerberos TGT

The ticket-granting ticket issued by the key distribution center after initial authentication; it is presented to obtain service tickets without resending credentials.

Orphaned account

An active account whose owner has left the organization or changed roles; it is a leading audit finding and a common path for unauthorized access.

Password hashing

Storing credentials as salted, deliberately slow hashes such as bcrypt, scrypt, or Argon2 so that stolen databases cannot be reversed or cheaply brute-forced.

False negative

A test result that fails to report a real weakness. In security scanning it represents undetected exposure and is more dangerous than a false positive.

Black box testing

Assessing a system with no prior knowledge of its internals, simulating an external attacker; results reflect what is reachable without insider information.

CVSS base score

A 0-10 rating of a vulnerability's intrinsic exploitability and impact; it excludes asset value, so it is not itself a business risk score.

Rules of engagement

A signed document defining test scope, targets, timing, allowed techniques, escalation contacts, and legal authorization before any penetration testing begins.

Incident containment

The response phase that limits spread by isolating hosts, blocking indicators, or disabling accounts, while preserving volatile evidence such as memory and connections.

3-2-1 backup rule

Keep three copies of data on two different media types with one copy offsite; immutable or offline copies protect against ransomware encryption.

SIEM correlation

Centralized log collection combined with rule and behavior analytics that link events across sources to detect patterns a single system would miss.

Change management backout plan

A documented procedure to reverse a change if it fails, including triggers, responsible parties, and verification steps, approved before implementation.

STRIDE

A threat modeling mnemonic covering spoofing, tampering, repudiation, information disclosure, denial of service, and elevation of privilege.

SAST versus DAST

Static analysis inspects source or bytecode without execution and finds issues early. Dynamic analysis attacks a running application and finds runtime-visible flaws.

Parameterized query

A database access pattern that separates SQL code from user-supplied values, preventing injection because input is never parsed as executable statement text.

Software bill of materials

A machine-readable inventory of components and versions in a product, typically SPDX or CycloneDX, enabling fast response when a dependency vulnerability is disclosed.

IPsec ESP versus AH

ESP encrypts and authenticates the payload, while AH provides integrity and origin authentication without encryption; transport mode protects payload, tunnel mode the whole packet.

Microsegmentation

Granular workload-level network policy that permits only explicitly required flows between systems, limiting lateral movement even inside a data center.