Security Operations Essentials Match
MediumRace the clock — pair each term with its definition as fast as you can, then try to beat your best time. A quick, replayable warm-up for this set.
Shuffling the deck…
Terms in this set
- Patching Applying updates to fix vulnerabilities, bugs, or add features.
- Hardening Reducing attack surface by removing unneeded services, accounts, and features.
- Logging Recording events from systems, applications, and network devices for monitoring and forensics.
- Monitoring Continuous observation of systems, networks, and identities for signs of compromise or misuse.
- SIEM Security Information and Event Management — centralizes log collection, correlation, and alerting.
- SOAR Security Orchestration, Automation, and Response — automates and connects security tools and workflows.
- Dashboard A visual summary of security signals — alerts, metrics, threats — used by analysts and leaders.
- Retention How long data — especially logs — is kept before being archived or destroyed.
- DLP Data Loss Prevention — detects and blocks sensitive data from leaving the organization.
- Triage Initial sorting of alerts or incidents by severity and impact to focus response.
- Playbook A step-by-step procedure that responders follow for a specific incident type.