Operating System, (2 words) Software that manages hardware and runs applications (Windows, Linux, macOS)., DNS, Translates domain names into IP addresses., Firewall, Filters network traffic based on predefined rules., Ransomware, __________ encrypts a victim’s files and demands payment for the decryption key., Phishing, A fake email pretending to be from a bank asks you to click a link and enter your password. This is an example of __________., Port, Logical endpoint for a service (e.g., 443 for HTTPS, 22 for SSH)., Hash, A one‑way function (SHA‑256, MD5) used to verify data integrity., False positive, (2 words) The IDS triggered an alert for a virus, but it was actually a safe system update. This alert is a __________ __________., persistence, After rebooting the compromised server, the malware restarted automatically because the attacker had set up __________ mechanisms., triage, In the SOC, L1 analysts perform __________ to quickly assess and prioritize incoming alerts., SIEM, A platform that collects, correlates, and alerts on logs from across the organization (e.g., Splunk, Sentinel)., VPN, An encrypted tunnel between a user and a network, protecting data in transit., EDR, This security tool continuously monitors endpoint activities and automatically responds to threats like malicious process execution., privilege, A user who only needs to read documents should not be given admin rights. This follows the principle of least __________., social engineering, Manipulating people to bypass security instead of breaking technical controls.

SOC analyst terms

Leaderboard

Visual style

Options

Switch template

Continue editing: ?