CompTIA Security + Ch11

A TCP/IP protocol that monitors network-attached devices and computers. It's usually incorporated as part of a network management system.

The process of measuring changes in networking, hardware, software and so on.

Identification of the security posture of an application, system, or network

The risk level to which a system, or other technology element is exposed.

Assessments that use baseline reporting and other analyses to discover vulnerabilities and weaknesses in systems and networks.

Technical assessments made of applications, systems or networks.

Files that log activity of users. They show who did what and when, also if they succeeded or failed.

The idea of ensuring that a person or group cannot refute the valididy of your proof against them.

Frames and packets of network traffic are analyzed for predetermined attack patterns. These patterns are known as signatures.

Also known as statistical anomaly based; establishes a performance baseline based on a set of normal network traffic evaluations.

A monitoring system that compares previous behavior of apps and/or computer systems to the current activity on the system.

Records or logs that show the tracked actions of users, whether the user was successful in the attempt.

In a network adapter this passes all network traffic to the CPU, not jus the frames addressed to it. The adapter captures all traffic regardless of its destination.

When a network adapter captures only the packets that are addressed to it.

Whe there is a accumulation of broadcast and multicast packet traffic on the LAN coming from one or more network interfaces.

Software deployed by the network management system that is loaded on managed devices.

The software run on one or more servers that controls the monitoring of networks attached devices and computers.