Quick Revision

GK One-Line Question & Answer

15541+ short questions with short answers, covering every category and sub-category on the site — no long articles to scroll through. Good for a fast recap before an exam, or a few minutes of daily practice.

Looking for exam process/strategy questions instead? Try the Exam Preparation FAQ →

Computer Networks → Introduction to Computer Networks 40

What is CSIRT
Computer Security Incident Response Team
click to copy
What is PSIRT
Product Security Incident Response Team at a vendor
click to copy
What is CVSSv3 base score components
Attack Vector Access Complexity Privileges Required User Interaction Scope Impact
click to copy
What is CVSS environmental score
Adjusting base score for specific organization context
click to copy
What is CVSS temporal score
Adjusting base score for exploit code maturity and fixes
click to copy
What is NVD (National Vulnerability Database)
US government database of CVE vulnerabilities with CVSS scores
click to copy
What is VEX (Vulnerability Exploitability eXchange)
Statement about exploitability of vulnerability in specific product
click to copy
What is CWE
Common Weakness Enumeration (types of weaknesses)
click to copy
What is CWE-79
Cross-site scripting weakness
click to copy
What is CWE-89
SQL injection weakness
click to copy
What is CWE-119
Buffer overflow weakness
click to copy
What is ATT&CK tactic
High-level adversary goal like initial access persistence
click to copy
What is ATT&CK technique
Specific method achieving an adversary tactic
click to copy
What is ATT&CK sub-technique
More specific implementation of a technique
click to copy
What is kill chain in security
Phases of cyberattack from reconnaissance to exfiltration
click to copy
What is Lockheed Martin Cyber Kill Chain stages
Recon Weaponize Deliver Exploit Install C2 Actions on Objectives
click to copy
What is lateral movement technique T1021
Remote services exploitation for lateral movement
click to copy
What is living off the land attack
Using legitimate system tools to avoid detection
click to copy
What is PowerShell in attacks
Often abused for fileless malware and lateral movement
click to copy
What is WMI abuse in attacks
Windows Management Instrumentation used for persistence and lateral movement
click to copy
What is pass-the-hash attack
Using captured NTLM hash to authenticate without knowing password
click to copy
What is pass-the-ticket attack
Using stolen Kerberos ticket for authentication
click to copy
What is golden ticket attack
Creating forged Kerberos TGT using KRBTGT hash
click to copy
What is DCSync attack
Mimicking domain controller to extract password hashes
click to copy
What is BloodHound in Active Directory
Tool visualizing AD attack paths for red and blue teams
click to copy
What is Active Directory in enterprise networks
Microsoft directory service for identity and access management
click to copy
What is LDAP in AD
Protocol for accessing Active Directory
click to copy
What is Kerberos in AD authentication
Ticket-based authentication for Windows domain accounts
click to copy
What is GPO (Group Policy Object)
Configuration settings applied to AD users and computers
click to copy
What is OU (Organizational Unit) in AD
Container for organizing AD objects with delegated management
click to copy
What is AD forest
Collection of one or more AD domains sharing schema
click to copy
What is AD trust
Relationship allowing authentication between AD domains
click to copy
What is Entra ID (formerly Azure AD)
Microsoft cloud identity platform for Azure and SaaS apps
click to copy
What is SCIM protocol
System for Cross-domain Identity Management (user provisioning)
click to copy
What is JIT (Just-In-Time) access
Granting elevated access only when needed for limited time
click to copy
What is PAM solution benefit
Controlling monitoring and auditing privileged access
click to copy
What is credential vaulting
Storing privileged credentials in secure encrypted vault
click to copy
What is session recording in PAM
Recording privileged sessions for audit and forensics
click to copy
What is secrets management
Storing and managing API keys certificates and passwords securely
click to copy
What is HashiCorp Vault
Secrets management tool for dynamic secrets and encryption
click to copy