Collaborate Disseminate
I’m studying for the CCSP exam and I came across this description:
An event is any unscheduled adverse impact to the operating
environment. An event is distinguished from a disaster by the
duration of the impact. W… Continue reading Is this description of the term "event" accurate witihin the context of Business Continuity and Disaster recovery?
I’m studying for the CCSP exam and one of the BC/DR terms that is referenced in my study material is “Maximum Allowable Downtime”. The definition for it is:
MAD (Maxium Allowable Downtime) How long it would take for an … Continue reading Is there a difference between "Maximum Tolerable Downtime" and "Maximum Allowed Downtime"?
I’m studying for the CCSP exam and the study material references two different terms which seems very similar:
Directory Services A system for managing identities and attributes. These allow the administrator to customi… Continue reading What’s the difference between "directory services" and "identity repositories"?
I’m helping to develop a security tool for Linux servers. We are planning to use domain specific language for building rules and view data inside application.
We are trying to look at tools like splunk, sumologic, elasticsea… Continue reading What is correct terminology for commands?
I’m studying for the CCSP exam and I’m confused with some of the terminologies between Organization normative framework and application normative framework.
The training material defines them as:
Organization normative… Continue reading What’s the difference between "Organization normative framework" and "Application normative framework"?
I’m looking into the history of malware. When was malicious software fist called malware? I think that malicious software is called “computer virus”.
Continue reading When did we start to call malicious software "malware"?
In the Computer and network security incident taxonomy what are the differences between “Incident”, “Attack” and “event”? Where does “threat” fit with them?
Continue reading What is the difference between "Incident", "Attack" and "event"?
I’m studying for the CCSP exam and the training material is a little vague on the term “crypto offloading”.
The term was mentioned in passing while describing TLS:
TLS is a protocol designed to ensure privacy when comm… Continue reading Does "crypto offloading" require the use of ASICs? Can the concept be applied elsewhere?
I’m studying for the CCSP exam and am confused on the difference between an “API gateway” and “XML gateway”. The training material I have states:
API gateways are also an important part of a layered security model.
T… Continue reading What’s the difference between an API gateway and XML gateway?
I’m studying for the CCSP and my training material isn’t very clear on the definition between “application-aware firewall” and “web application firewall”.
The training material states:
Early on, these devices were limi… Continue reading What’s the difference between an "application-aware firewall" and a "web application firewall"?