exam 3 flashcards

All 97 cards

1. Card 1

   Define 'Cyber threat'.

   A cyber threat refers to any potential malicious act that seeks to damage data, disrupt operations, or gain unauthorized access to computer systems or networks. It encompasses various forms of attacks and vulnerabilities that can compromise information security.

2. Card 2

   Distinguish between 'Malware' and 'Social Engineering'.

   Malware is malicious software designed to disrupt, damage, or gain unauthorized access to a computer system, often without the user's knowledge. Social Engineering, on the other hand, is a manipulation technique that exploits human psychology to trick users into divulging confidential information or performing actions that compromise security.

3. Card 3

   Define 'Denial of Service' (DoS) attack.

   A Denial of Service (DoS) attack is a cyber-attack where the perpetrator seeks to make a machine or network resource unavailable to its intended users by temporarily or indefinitely disrupting services of a host connected to the Internet. This is often achieved by overwhelming the target system with a flood of traffic.

4. Card 4

   What is a 'Man-in-the-middle' attack?

   A Man-in-the-middle (MITM) attack is a form of eavesdropping where an attacker intercepts and relays messages between two parties who believe they are communicating directly with each other. The attacker can read, insert, and modify the messages, making it seem as if the communication is legitimate.

5. Card 5

   Define 'Password attacks'.

   Password attacks are attempts by an unauthorized party to gain access to a system by cracking or guessing user passwords. These attacks can involve various techniques such as brute-force attacks, dictionary attacks, or credential stuffing to compromise user accounts.

6. Card 6

   What is the 'Principle of Least Privilege'?

   The Principle of Least Privilege (PoLP) is a security concept in which a user is given the minimum levels of access—or permissions—needed to perform their job functions. This limits the potential damage from a security breach or error, as an attacker or compromised account would only have limited access to resources.

7. Card 7

   Define 'Access Control Lists' (ACLs).

   Access Control Lists (ACLs) are a list of permissions attached to an object, such as a file or directory, that specifies which users or system processes are granted access to the object and what operations are allowed on it. They are a fundamental component of access control mechanisms in operating systems and networks.

8. Card 8

   Distinguish between 'Identification' and 'Authentication'.

   Identification is the process by which a user claims an identity, typically through a username. Authentication is the process of verifying that the claimed identity is legitimate, usually by providing credentials like a password or biometric data, to confirm the user is who they say they are.

9. Card 9

   Define 'Authorization'.

   Authorization is the process of determining what specific resources or actions a user is permitted to access or perform after they have been successfully identified and authenticated. It dictates the scope of a user's access rights within a system.

10. Card 10

    What is 'Access Control'?

    Access Control is a security technique that regulates who or what can view or use resources in a computing environment. It involves identification, authentication, and authorization to ensure that only authorized individuals or systems can access specific data or functionalities.

11. Card 11

    What are the key components of an Incident Response Plan?

    An Incident Response Plan typically includes preparation, identification, containment, eradication, recovery, and post-incident activity. These steps ensure a structured approach to managing and mitigating the impact of security incidents.

12. Card 12

    What are the steps involved in Forensic Analysis?

    Forensic Analysis generally involves identification, preservation, collection, examination, analysis, and presentation of digital evidence. This systematic process helps in investigating cyber incidents and gathering admissible evidence for legal proceedings.

13. Card 13

    Define 'Digital Evidence'.

    Digital Evidence refers to any probative information stored or transmitted in digital form that a party to a court case may use at trial. It can include data from computers, mobile devices, networks, and other electronic sources, and is crucial in cybercrime investigations.

14. Card 14

    What is a 'Business Continuity Plan'?

    A Business Continuity Plan (BCP) is a comprehensive strategy that outlines how an organization will continue to operate essential functions during and after a disaster or disruption. It focuses on maintaining business operations and minimizing downtime.

15. Card 15

    Define 'Disaster Recovery Plan' (DRP).

    A Disaster Recovery Plan (DRP) is a documented process or set of procedures to recover and protect a business IT infrastructure in the event of a disaster. It is a subset of a BCP, specifically focusing on the restoration of IT systems and data.

16. Card 16

    How does 'Network Security' differ from 'Security Culture'?

    Network Security refers to the measures taken to protect the underlying network infrastructure and data from unauthorized access, misuse, modification, or denial. Security Culture, conversely, refers to the shared values, beliefs, and practices of an organization regarding security, emphasizing the human element in maintaining security.

17. Card 17

    What is the primary purpose of 'Preventive Measures' in cybersecurity?

    The primary purpose of preventive measures in cybersecurity is to proactively stop cyberattacks and security breaches from occurring in the first place. These measures aim to reduce vulnerabilities and strengthen defenses before an incident can impact systems or data.

18. Card 18

    Explain the concept of 'emerging Cyber threats'.

    Emerging cyber threats refer to new or evolving forms of cyberattacks and vulnerabilities that pose significant risks to information security. These threats often leverage novel techniques, technologies, or attack vectors, requiring continuous adaptation of security strategies.

19. Card 19

    What role do 'figures and diagrams' play in understanding complex concepts in CIS2010?

    Figures and diagrams in CIS2010 are crucial for visualizing and simplifying complex concepts, processes, and relationships. They provide a graphical representation that aids in comprehension and retention, often illustrating the architecture of systems or the flow of an attack or defense mechanism.

20. Card 20

    Why is 'testing yourself' more effective than re-reading for study, according to the source notes?

    According to the source notes, testing yourself is more effective than re-reading for study due to the 'testing effect.' This cognitive phenomenon demonstrates that actively retrieving information from memory strengthens recall and improves long-term retention more significantly than passive review.

21. Card 21

    What is 'spaced repetition' and why is it recommended for studying?

    Spaced repetition is a learning technique that involves reviewing material at increasing intervals of time. It is recommended because it leverages the 'testing effect' over time, optimizing memory retention by challenging recall just as information is about to be forgotten, leading to maximum benefit for long-term learning.

22. Card 22

    In the context of CIS2010, what does it mean to 'not simply do tasks by rote' in workshops?

    In CIS2010 workshops, 'not simply doing tasks by rote' means actively seeking to understand the underlying concepts and reasons behind the actions performed in tools like Excel. It emphasizes comprehending how tasks demonstrate principles from the eBook rather than just mechanically following instructions.

23. Card 23

    Why are concepts in BOLD in the study guide considered 'high priority'?

    Concepts in BOLD in the study guide are considered high priority because they represent the primary and most complex concepts that students need to know, describe, and differentiate to perform well on tests. They are central to the unit's learning objectives.

24. Card 24

    What is the significance of 'videos that appear in the TopHat portal' for test preparation?

    The videos in the TopHat portal are highly significant for test preparation because many questions on unit tests come directly from their content. Taking notes on these videos is explicitly recommended as a key study strategy.

25. Card 25

    If a company experiences a major data breach, which plan would primarily guide the restoration of its compromised IT systems and data?

    In the event of a major data breach, the company's Disaster Recovery Plan (DRP) would primarily guide the restoration of its compromised IT systems and data. While the Incident Response Plan would manage the immediate aftermath, the DRP focuses specifically on bringing IT infrastructure and data back to an operational state.

26. Card 26

    Define 'Malware' and provide an example of its function.

    Malware is malicious software designed to disrupt, damage, or gain unauthorized access to a computer system. An example is a virus that attaches itself to legitimate programs and spreads to other computers, causing data corruption or system crashes.

27. Card 27

    Distinguish between 'Social Engineering' and 'Denial of Service' attacks.

    Social Engineering relies on manipulating individuals to divulge confidential information or perform actions that compromise security, often through deception. Denial of Service (DoS) attacks aim to make a machine or network resource unavailable to its intended users by overwhelming it with traffic or exploiting vulnerabilities.

28. Card 28

    Define 'Password attacks' and mention a common method used.

    Password attacks are attempts to gain unauthorized access to a system by cracking or guessing user passwords. A common method is a brute-force attack, where an attacker systematically tries every possible combination of characters until the correct password is found.

29. Card 29

    Define 'Access Control Lists (ACLs)' and their primary purpose.

    Access Control Lists (ACLs) are lists of permissions attached to an object (like a file or folder) that specify which users or system processes are granted access to the object, and what operations are allowed on it. Their primary purpose is to enforce access control policies.

30. Card 30

    Distinguish between 'Authentication' and 'Authorization'.

    Authentication is the process of verifying the identity of a user or system, often through credentials like passwords or biometrics. Authorization, on the other hand, is the process of determining what specific resources or actions an authenticated user is permitted to access or perform.

31. Card 31

    What is 'Identification' in the context of security?

    Identification in security is the process by which a user or system claims an identity. This is typically the first step in accessing a system, followed by authentication to verify that claimed identity.

32. Card 32

    List the key components of an 'Incident Response Plan'.

    Key components of an Incident Response Plan include preparation, identification, containment, eradication, recovery, and lessons learned. These steps outline the systematic approach an organization takes to manage and recover from security incidents.

33. Card 33

    Define 'Digital Forensics' and its role in incident handling.

    Digital Forensics is the process of identifying, preserving, analyzing, and presenting digital evidence in a legally acceptable manner. Its role in incident handling is crucial for understanding how an incident occurred, its impact, and for potential legal action.

34. Card 34

    What is the purpose of a 'Disaster Recovery Plan'?

    A Disaster Recovery Plan (DRP) is a documented process or set of procedures to recover and protect a business IT infrastructure in the event of a disaster. It specifically focuses on restoring IT systems and data to enable business operations.

35. Card 35

    Define 'System Software' and provide an example.

    System Software is a type of computer program that is designed to run a computer's hardware and application programs. An operating system like Windows or macOS is a prime example, managing the computer's resources and providing a platform for applications.

36. Card 36

    Distinguish between 'Application Software' and 'Utility Software'.

    Application Software performs specific tasks for end-users, such as word processing or web browsing. Utility Software, conversely, helps to maintain, analyze, optimize, and protect the computer, like antivirus programs or disk defragmenters.

37. Card 37

    What are 'Operating Systems (OS)' and what is their primary function?

    Operating Systems (OS) are system software that manages computer hardware and software resources and provides common services for computer programs. Their primary function is to act as an intermediary between the user and the computer hardware, making the computer usable.

38. Card 38

    Define 'Business Process Modeling (BPM)'.

    Business Process Modeling (BPM) is a technique used to graphically represent an organization's business processes, enabling a clear understanding of how work is done. It helps in analyzing, improving, and managing these processes.

39. Card 39

    What is the difference between an 'As-Is process' and a 'To-Be process' in BPM?

    An 'As-Is process' describes the current state of a business process, detailing how it is actually performed. A 'To-Be process' outlines the desired future state of the process, incorporating improvements and changes to achieve better efficiency or outcomes.

40. Card 40

    What are 'Swim Lanes' in Business Process Modeling Notation (BPMN)?

    Swim Lanes are visual containers in BPMN diagrams that represent participants in a process, such as departments or roles. They help to organize and categorize activities by showing who is responsible for performing specific tasks within the process.

41. Card 41

    Distinguish between 'Flowcharts' and 'Pseudocode'.

    Flowcharts are graphical representations of an algorithm or process, using symbols to depict steps, decisions, and data flow. Pseudocode is a plain language description of the steps in an algorithm or program, designed to be easily understood by humans and not directly executable by a computer.

42. Card 42

    Define 'Algorithms' in the context of programming.

    Algorithms are a finite set of well-defined, ordered instructions for accomplishing a task or solving a problem. In programming, they form the logical basis for how a program will process data and achieve a desired outcome.

43. Card 43

    What is an 'Integer' data type in coding?

    An 'Integer' is a fundamental data type in coding that represents whole numbers, both positive and negative, without any fractional or decimal components. It is used for counting and mathematical operations where precision with whole numbers is required.

44. Card 44

    Distinguish between an 'expression' and an 'equation' in coding.

    An 'expression' is a combination of values, variables, operators, and functions that evaluates to a single value. An 'equation', on the other hand, is a statement that asserts the equality of two expressions, typically used to assign a value or test a condition.

45. Card 45

    What is a 'Boolean' data type?

    A 'Boolean' data type can only have one of two possible values: true or false. It is primarily used for logical operations, conditional statements, and flags to control program flow based on whether a condition is met or not.

46. Card 46

    Define 'Text strings' in programming.

    Text strings are a sequence of characters, such as letters, numbers, or symbols, treated as a single unit. They are used to store and manipulate textual data within a program, often enclosed in quotation marks.

47. Card 47

    What is an 'Integrated Development Environment (IDE)'?

    An Integrated Development Environment (IDE) is a software application that provides comprehensive facilities to computer programmers for software development. An IDE normally consists of a source code editor, build automation tools, and a debugger.

48. Card 48

    Define 'Algorithm' in the context of programming.

    An algorithm is a set of well-defined, step-by-step instructions or rules designed to solve a specific problem or perform a computation. It provides a clear procedure for achieving a desired outcome.

49. Card 49

    Distinguish between a 'Flowchart' and 'Pseudocode'.

    A flowchart is a visual representation of an algorithm using standard symbols and connecting lines to show the flow of logic. Pseudocode, on the other hand, is an informal, high-level description of an algorithm that uses a mix of natural language and programming constructs, without strict syntax rules.

50. Card 50

    What is an 'Integer' data type?

    An integer is a common computer data type used to represent whole numbers, both positive and negative, without any fractional or decimal components. It is typically used for counting or discrete values.

51. Card 51

    Define a 'Boolean' data type.

    A Boolean is a data type that can only have one of two possible values: true or false. It is fundamental for logical operations and decision-making within programming.

52. Card 52

    What is a 'Text String'?

    A text string is a sequence of characters, such as letters, numbers, and symbols, treated as a single unit. It is used to store and manipulate textual data in programming.

53. Card 53

    Distinguish between an 'Expression' and an 'Equation'.

    An expression is a combination of values, variables, operators, and functions that evaluates to a single value, such as 'x + 5'. An equation, however, is a statement that asserts the equality of two expressions, typically containing an equals sign, like 'x + 5 = 10'.

54. Card 54

    Define 'Programming'.

    Programming is the process of creating a set of instructions that tell a computer how to perform a specific task. It involves writing code in a programming language that the computer can understand and execute.

55. Card 55

    What is 'Assignment' in programming?

    Assignment is the operation of giving a value to a variable. It typically uses an assignment operator (like '=') to store the result of an expression or a literal value into a named memory location.

56. Card 56

    Define 'Variable'.

    A variable is a named storage location in a computer's memory that can hold a value, which can change during the execution of a program. It acts as a placeholder for data.

57. Card 57

    What is a 'Constant' in programming?

    A constant is a named storage location whose value cannot be changed once it has been assigned. Unlike variables, constants retain their initial value throughout the program's execution.

58. Card 58

    Define 'Float' (floating point) data type.

    A float, or floating-point number, is a computer data type used to represent real numbers, which include both integers and numbers with fractional parts. It allows for the representation of values with decimal points.

59. Card 59

    What are 'Loops' in programming?

    Loops are control flow statements that allow a block of code to be executed repeatedly based on a certain condition. They are essential for automating repetitive tasks and iterating over collections of data.

60. Card 60

    Define 'Selections' (or conditional statements) in programming.

    Selections are control flow statements that allow different blocks of code to be executed based on whether a specified condition is true or false. Examples include 'if-else' statements, which enable programs to make decisions.

61. Card 61

    What are 'Sequences' in programming?

    Sequences refer to the ordered execution of instructions in a program, one after another, in the order they are written. It is the most basic control structure, where each step is performed in a linear fashion.

62. Card 62

    Define 'Artificial Intelligence (AI)'.

    Artificial Intelligence (AI) refers to the simulation of human intelligence processes by machines, especially computer systems. These processes include learning, reasoning, problem-solving, perception, and language understanding.

63. Card 63

    Distinguish between 'Narrow AI' and 'General AI'.

    Narrow AI (Weak AI) is designed and trained for a specific task, like playing chess or facial recognition, and cannot perform beyond its programmed function. General AI (Strong AI), on the other hand, is a theoretical type of AI that can understand, learn, and apply intelligence to any intellectual task that a human being can.

64. Card 64

    What is 'Machine Learning (ML)'?

    Machine Learning (ML) is a subset of AI that enables systems to learn from data, identify patterns, and make decisions with minimal human intervention. It involves algorithms that improve their performance over time as they are exposed to more data.

65. Card 65

    Define 'Natural Language Processing (NLP)'.

    Natural Language Processing (NLP) is a field of AI that focuses on enabling computers to understand, interpret, and generate human language. It allows machines to process and analyze large amounts of natural language data.

66. Card 66

    What are 'Expert Systems'?

    Expert Systems are AI programs designed to emulate the decision-making ability of a human expert in a specific domain. They use a knowledge base and inference engine to solve complex problems.

67. Card 67

    Define 'Robotics'.

    Robotics is a branch of engineering and computer science that deals with the design, construction, operation, and application of robots. It integrates AI to enable robots to perform tasks autonomously or semi-autonomously.

68. Card 68

    What is 'Computer Vision'?

    Computer Vision is an interdisciplinary field of AI that trains computers to 'see' and interpret visual information from the world, much like human vision. It enables machines to process, analyze, and understand images and videos.

69. Card 69

    Define 'Generative AI (GenAI)'.

    Generative AI (GenAI) refers to a category of AI models capable of generating new, original content, such as text, images, audio, or video, that resembles real-world data. These models learn patterns from existing data to create novel outputs.

70. Card 70

    What are 'Neural Networks' in the context of AI?

    Neural Networks are a series of algorithms that mimic the operations of a human brain to recognize relationships between vast amounts of data. They are a core component of deep learning and are used for tasks like pattern recognition and prediction.

71. Card 71

    Define 'Large Language Models (LLMs)'.

    Large Language Models (LLMs) are a type of generative AI that are trained on vast amounts of text data to understand, generate, and translate human language. They can perform a wide range of natural language tasks, from answering questions to writing essays.

72. Card 72

    What is 'Hallucination' in AI systems?

    Hallucination in AI systems refers to the phenomenon where an AI model generates information that is plausible but factually incorrect, nonsensical, or not supported by its training data. This can occur when the model attempts to fill gaps in its knowledge or generate creative responses.

73. Card 73

    Define 'Entity' in the context of structured data.

    An entity represents a real-world object or concept about which data is stored. In a database, an entity typically corresponds to a table, where each row represents an instance of that entity.

74. Card 74

    What is the definition of 'Structured Data'?

    Structured data is data that is organized in a highly formatted and predefined manner, typically stored in tabular form with rows and columns. This structure makes it easily searchable and analyzable.

75. Card 75

    Define 'Unstructured Data' and provide an example.

    Unstructured data is information that does not have a predefined data model or is not organized in a specific format. Examples include text documents, emails, audio files, and video files.

76. Card 76

    What is 'Cardinality' in the context of database relationships?

    Cardinality describes the numerical relationship between two entities or tables in a relational database. It specifies how many instances of one entity can be associated with instances of another entity, such as one-to-one, one-to-many, or many-to-many.

77. Card 77

    Define 'Normalization' in database management.

    Normalization is the process of organizing the columns and tables of a relational database to minimize data redundancy and improve data integrity. It typically involves breaking down large tables into smaller, related tables.

78. Card 78

    What is a 'Database Management System (DBMS)'?

    A DBMS is a software system designed to manage and organize data in a database. It provides functionalities for storing, retrieving, updating, and managing data, and ensures data security and integrity.

79. Card 79

    Define 'NoSQL' and explain its primary characteristic.

    NoSQL refers to a class of non-relational database management systems that provide a mechanism for storage and retrieval of data that is modeled in means other than the tabular relations used in relational databases. Its primary characteristic is its ability to handle large volumes of unstructured or semi-structured data with high flexibility and horizontal scalability.

80. Card 80

    What is 'Horizontal scalability' in the context of databases?

    Horizontal scalability, also known as scaling out, refers to the ability to increase the capacity of a system by adding more machines or nodes to a distributed system. This contrasts with vertical scalability, which involves upgrading the resources of a single machine.

81. Card 81

    Define 'Schema-less models' as they relate to NoSQL databases.

    Schema-less models are a characteristic of many NoSQL databases, meaning they do not enforce a rigid, predefined schema for the data they store. This allows for greater flexibility in storing diverse and evolving data structures without requiring upfront schema definitions.

82. Card 82

    What is the purpose of the 'SELECT' clause in SQL?

    The SELECT clause in SQL is used to specify which columns or expressions you want to retrieve from a database table. It is a fundamental part of almost every SQL query, determining the data that will be returned.

83. Card 83

    Define 'Structured Query Language (SQL)'.

    SQL is a standard language for managing and manipulating relational databases. It is used to perform tasks such as querying data, updating data, inserting records, and creating or modifying database schemas.

84. Card 84

    What is the function of the 'WHERE' clause in SQL?

    The WHERE clause in SQL is used to filter records based on specified conditions. It extracts only those records that fulfill the given criteria, allowing for precise data retrieval.

85. Card 85

    Define 'Charts' in the context of data visualization.

    Charts are graphical representations of data, used to display and compare data points in an easily understandable visual format. They help in identifying trends, patterns, and outliers more effectively than raw data.

86. Card 86

    What are 'Dashboards' in data visualization?

    Dashboards are visual displays of key information designed to provide a consolidated, at-a-glance view of important metrics and data. They typically integrate multiple charts, graphs, and tables to present a comprehensive overview of performance or status.

87. Card 87

    Define 'Geospatial Visualizations'.

    Geospatial visualizations are data representations that display information in a geographical context, often using maps. They are used to analyze and communicate spatial patterns, distributions, and relationships of data across different locations.

88. Card 88

    What is 'Infographics'?

    Infographics are visual representations of information, data, or knowledge intended to present complex information quickly and clearly. They often combine text, images, and charts to tell a story or explain a concept in an engaging way.

89. Card 89

    Define 'ETL' in the context of data processing.

    ETL stands for Extract, Transform, Load, which is a three-step process used to integrate data from multiple sources into a data warehouse or another destination. It involves extracting data, transforming it into a usable format, and then loading it into the target system.

90. Card 90

    What is 'Sustaining Innovation'?

    Sustaining innovation refers to improvements made to existing products, services, or processes that do not create new markets or value networks. These innovations typically target existing customers with better performance, features, or quality within established market segments.

91. Card 91

    Define 'Disruptive Innovation'.

    Disruptive innovation describes an innovation that creates a new market and value network, eventually displacing established market-leading firms, products, and alliances. It typically starts by offering a simpler, more convenient, and often cheaper product or service that appeals to a new or overlooked segment of customers.

92. Card 92

    What is 'Artificial Intelligence'?

    Artificial Intelligence (AI) refers to the simulation of human intelligence in machines that are programmed to think like humans and mimic their actions. It encompasses machine learning, natural language processing, and problem-solving capabilities.

93. Card 93

    Define 'Blockchain'.

    Blockchain is a decentralized, distributed ledger technology that records transactions across many computers so that any involved record cannot be altered retroactively without the alteration of all subsequent blocks and the consensus of the network. It is known for its security and transparency.

94. Card 94

    What is 'disintermediation'?

    Disintermediation is the process of removing the intermediary or 'middleman' from a transaction or supply chain. This often occurs when producers sell directly to consumers, or when new technologies enable direct connections that bypass traditional distributors.

95. Card 95

    Define 'Quantum computing'.

    Quantum computing is a new type of computation that harnesses the phenomena of quantum mechanics, such as superposition and entanglement, to perform operations on data. It has the potential to solve certain computational problems exponentially faster than classical computers.

96. Card 96

    Describe the relationship between an entity and a table in a database.

    In a database, an entity represents a real-world object or concept, such as a customer or a product. A table is the physical manifestation of an entity within a relational database, where each table stores all the data related to a single entity type.

97. Card 97

    Explain how 'instances' and 'attributes' are found in tables.

    In a table, each row represents an 'instance' of the entity, meaning a specific occurrence of that object or concept (e.g., a specific customer). Each column in the table represents an 'attribute' of the entity, describing a characteristic or property of that instance (e.g., customer name, customer ID).

More flashcard decks

• Pharmacology Exam flashcards (98 cards)
• CHEM (EXAM 4) flashcards (50 cards)
• POLS 202 Exam II Review flashcards (50 cards)
• Science Exam Final Les Yeux flashcards (30 cards)
• POLS 202 Review Exam II flashcards (20 cards)
• A&P Exam 2 Study Guide2 flashcards (20 cards)

Browse every shared deck