CROSSWORD Domain 4.3

12345678910111213141516171819202122232425
Across
  1. 6. An authorized simulated attack that attempts to exploit vulnerabilities and evaluate their real world impact
  2. 7. A scan result that fails to detect a vulnerability that is actually present
  3. 9. Actively testing a system after remediation to confirm that the vulnerability can no longer be exploited
  4. 12. A scan result that incorrectly reports a vulnerability that is not actually present
  5. 13. Dividing or isolating network resources to reduce exposure and limit the spread of attacks
  6. 15. A program that rewards security researchers for responsibly discovering and reporting vulnerabilities
  7. 17. Open Source Intelligence gathered from publicly available sources to help identify threats and vulnerabilities
  8. 19. Security testing that examines an application while it is running
  9. 22. A process that allows researchers to privately report discovered vulnerabilities to the affected organization
  10. 23. A vulnerability scan performed with authorized login credentials to identify weaknesses requiring higher privileges
  11. 24. Running another vulnerability scan after remediation to confirm that the weakness has been corrected
  12. 25. An automated assessment that searches systems networks or applications for known security weaknesses
Down
  1. 1. Security testing that examines source code or binaries without executing the application
  2. 2. The amount of risk an organization is willing to accept
  3. 3. The percentage of an asset's value expected to be lost if a specific risk occurs
  4. 4. Common Vulnerabilities and Exposures a standardized list of publicly disclosed security vulnerabilities
  5. 5. A continuous stream of information about current or emerging cyber threats
  6. 8. The process of categorizing vulnerabilities based on characteristics severity and potential impact
  7. 10. Applying software firmware or driver updates to correct known vulnerabilities
  8. 11. An alternate security measure used to reduce risk when the primary control or remediation cannot be implemented
  9. 14. Tracking third party and open source libraries for known vulnerabilities outdated versions and security issues
  10. 16. The ongoing process of identifying analyzing prioritizing remediating validating and reporting security weaknesses
  11. 18. A vulnerability scan performed without login credentials that identifies weaknesses visible to an outside attacker
  12. 20. The Common Vulnerability Scoring System used to assign standardized severity scores to vulnerabilities
  13. 21. An Indicator of Compromise consisting of forensic evidence that may reveal malicious activity on a system or network