CEH Practical flashcards

30 cards. Read the term and the definition here. The deck at the top of this page is optional.

Rules of engagement

The agreed operational conditions for an assessment, including assets, timing, permitted methods, stop conditions, communication and evidence handling, interpreted with the actual authorization and contract.

Executive summary

A report section presenting material findings and business consequences for decision makers, with scope and uncertainty made clear rather than substituting unsupported certainty for technical evidence.

Retest

A separately scoped verification of a reported remediation and relevant behavior, which does not automatically establish that every unrelated system weakness has been removed.

Passive source

A source consulted without direct probing of the assessed target under the stated contact model, whose data can still be outdated, incomplete or wrongly attributed.

Enumeration

Collecting information about services, identities, resources or configuration within authorization, requiring qualified interpretation of what the observed responses actually establish.

Service banner

A reported service identifier or descriptive response that can support investigation but is not by itself proof of an installed vulnerable component or exploitable path.

SQL Injection

A code injection technique that exploits vulnerabilities in an application's database layer by inserting malicious SQL statements through user input, potentially exposing or altering data.

Cross-Site Scripting (XSS)

A vulnerability where an attacker injects malicious scripts into web pages viewed by other users, potentially stealing cookies or session tokens.

Input Validation

Checking supplied data against expected type, size, format and range. It supports robust handling but does not replace parameterization, context-aware output handling or authorization controls.

Patch Management

The process of identifying, acquiring, testing, and installing software updates (patches) to fix vulnerabilities and improve system security.

Endpoint Detection and Response (EDR)

A security solution that continuously monitors endpoint devices for suspicious activity, provides forensic data, and enables automated response to threats.

Antivirus Software

A program that detects, prevents, and removes malicious software (malware) from computer systems, often using signature-based and heuristic methods.

Hardening

The process of securing a system by reducing its attack surface, such as disabling unnecessary services, closing unused ports, and applying secure configurations.

Least Privilege

The principle that users and systems should be granted only the minimum access rights necessary to perform their tasks, reducing the potential damage from accidents or malicious activity.

Separation of Duties

A control that divides critical tasks among different individuals so that no single person can complete a sensitive action alone, helping to prevent fraud and errors.

Role-Based Access Control (RBAC)

An access control model where permissions are assigned to roles rather than individual users, and users are assigned to roles based on their job responsibilities.

Multi-Factor Authentication (MFA)

An authentication method that requires two or more independent credentials from different categories (something you know, have, or are) to verify a user's identity.

Authentication

The process of verifying the identity of a user, device, or system, typically through credentials such as passwords, tokens, or biometrics.

Authorization

The process of determining what actions or resources an authenticated entity is permitted to access, often enforced through access control policies.

Single Sign-On (SSO)

A mechanism that allows a user to log in once and access multiple applications or systems without re-entering credentials, improving usability and centralizing access control.

Encryption

The process of converting plaintext into ciphertext using an algorithm and a key, so that only authorized parties can read the original information.

Symmetric Encryption

An encryption method that uses the same secret key for both encryption and decryption, offering speed but requiring secure key distribution.

Asymmetric Encryption

Encryption using a suitable public-key scheme and a corresponding private key for decryption. Authenticated key distribution and the specified padding/protocol remain essential; signatures and key agreement are distinct constructions.

Hash Function

A digest construction mapping input to an output under its defined algorithm, with cryptographic versions designed for appropriate resistance properties. Password storage needs a suitable salted password-hashing/KDF scheme rather than a bare fast digest.

Digital Signature

An electronic signature that uses asymmetric cryptography to verify the authenticity and integrity of a message or document.

Access control

The policies and mechanisms that determine who can access which systems, data, or facilities and under what conditions.

Security Information and Event Management (SIEM)

A system that collects, aggregates, and analyzes log data from various sources to detect security incidents and support compliance reporting.

Incident Response

A structured approach to handling security incidents, typically including preparation, detection, containment, eradication, recovery, and lessons learned.

Vulnerability

A weakness in a system, application, or process that could be exploited by a threat to cause harm or unauthorized access.

Vulnerability Scanning

The automated process of identifying and assessing weaknesses in systems and applications, often using tools that compare configurations against known vulnerability databases.