a Flashcards

Question

What is ARP?

Answer 1

Address Resolution Protocol ## Footnote Resolves IP addresses to MAC addresses.

Answer 2

Certificate Signing Request ## Footnote A request sent to a certificate authority for a digital certificate.

Answer 3

Address Space Layout Randomization ## Footnote A security technique to prevent exploitation by randomizing memory address locations.

Answer 4

Cross-site Request Forgery ## Footnote An attack that tricks a user into performing actions without consent.

Answer 5

Adversarial Tactics, Techniques, and Common Knowledge ## Footnote A cybersecurity knowledge base of attack behaviors.

Answer 6

Channel Service Unit ## Footnote A device used to connect digital lines to a router.

Answer 7

Counter Mode ## Footnote An encryption mode that converts a block cipher into a stream cipher.

Answer 8

Acceptable Use Policy ## Footnote A set of rules governing use of network or system resources.

Answer 9

Chief Technology Officer ## Footnote Executive responsible for technological development and direction.

Answer 10

Antivirus ## Footnote Software used to detect and remove malicious software.

Answer 11

Common Vulnerability Enumeration ## Footnote A reference system for publicly known information-security vulnerabilities.

Answer 12

Bourne Again Shell ## Footnote A Unix shell and command processor.

Answer 13

Common Vulnerability Scoring System ## Footnote A system for rating the severity of security vulnerabilities.

Answer 14

Business Continuity Planning ## Footnote The process to ensure continuous business operations during disruption.

Answer 15

Choose Your Own Device ## Footnote Employees select their preferred device from a list approved by the organization.

Answer 16

Border Gateway Protocol ## Footnote The protocol used to exchange routing information across the internet.

Answer 17

Discretionary Access Control ## Footnote An access control method where the owner defines access permissions.

Answer 18

Business Impact Analysis ## Footnote Identifies critical systems and evaluates the impact of disruptions.

Answer 19

Database Administrator ## Footnote Manages and maintains databases.

Answer 20

Basic Input/Output System ## Footnote Firmware used to initialize hardware during booting.

Answer 21

Distributed Denial of Service ## Footnote An attack using multiple systems to overwhelm a target.

Answer 22

Business Partners Agreement ## Footnote A written agreement outlining responsibilities in a business relationship.

Answer 23

Data Execution Prevention ## Footnote Prevents code from being run in certain memory areas to stop exploits.

Answer 24

Bridge Protocol Data Unit ## Footnote Used to detect loops in a network with Spanning Tree Protocol.

Answer 25

Digital Encryption Standard ## Footnote A symmetric-key method for encrypting electronic data.

Answer 26

Bring Your Own Device ## Footnote Policy allowing employees to use personal devices for work.

Answer 27

Dynamic Host Configuration Protocol ## Footnote Assigns IP addresses and configures devices on a network.

Answer 28

Certificate Authority ## Footnote Issues and manages security credentials and digital certificates.

Answer 29

Diffie-Hellman Ephemeral ## Footnote A key exchange protocol using temporary keys for forward secrecy.

Answer 30

Completely Automated Public Turing test to tell Computers and Humans Apart ## Footnote Used to distinguish human from automated access.

Answer 31

Completely Automated Public Turing test to tell Computers and Humans Apart

Answer 32

Corrective Action Report Definition: A Corrective Action Report is a formal document used to identify, document, and correct the root causes of nonconformities or security incidents within an organization’s systems or processes. It outlines the issue, the investigation, and the corrective actions taken to prevent recurrence. Purpose in Security: In the context of cybersecurity and risk management, CARs are part of an organization’s incident response and continuous improvement processes. They ensure that once a security breach or vulnerability is identified, steps are taken not only to fix the immediate problem but also to address underlying weaknesses in policies, configurations, or behavior. Example: If a phishing attack compromises a user account, a CAR might lead to retraining employees, implementing multi-factor authentication, and improving email filtering to prevent similar incidents.

Answer 33

Cloud Access Security Broker Definition: A Cloud Access Security Broker is a security policy enforcement point placed between cloud service users and cloud applications to monitor activity, enforce security policies, and ensure compliance. Purpose in Security: CASBs provide visibility into cloud usage across an organization, helping to detect shadow IT, control access to cloud data, encrypt sensitive information, and prevent data leaks or misuse of cloud services. Example: If an employee uploads sensitive data to an unsanctioned cloud storage service, a CASB can detect this activity, block the transfer, and alert the security team—maintaining compliance with organizational policies and regulations.

Answer 34

Cipher Block Chaining Definition: Cipher Block Chaining is a mode of operation for block ciphers in which each block of plaintext is XORed with the previous ciphertext block before being encrypted. This method ensures that identical plaintext blocks produce different ciphertexts, enhancing security. Purpose in Security: CBC prevents patterns in encrypted data, making it harder for attackers to infer information from ciphertext. It requires an initialization vector (IV) for the first block to ensure randomness. Example: If you’re encrypting multiple blocks of sensitive data (like a document), CBC ensures that even repeated phrases result in unique encrypted blocks, protecting against analysis by attackers.

Answer 35

Counter Mode with Cipher Block Chaining Message Authentication Code Protocol

Answer 36

Closed-circuit Television

Answer 37

Computer Emergency Response Team

Answer 38

Cipher Feedback

Answer 39

DomainKeys Identified Mail

Answer 40

Dynamic Link Library Summary: Dynamic Link Library (DLL) A Dynamic Link Library (DLL) is a file that contains code, data, and functions that can be used by multiple programs at runtime, helping reduce redundancy and improve efficiency. DLLs allow programs to share common functionality without duplicating code. ⸻ Key Points: • File extension: .dll • Used for: Code reuse, modular design, memory efficiency • Loaded dynamically (during program execution) • Examples: • user32.dll – user interface functions • GDI32.dll – graphics and printing ⸻ Analogy: A DLL is like a shared toolbox—multiple programs grab the tools (functions) they need without bringing their own.

Answer 41

Data Loss Prevention According to CompTIA Security+, Data Loss Prevention (DLP) refers to: Technologies, strategies, and policies used to prevent unauthorized access, transfer, or leakage of sensitive data. DLP solutions monitor, detect, and block the movement of critical information — whether in use, in motion, or at rest — to ensure data doesn’t leave the organization’s control. There are three main types of DLP controls: 1. Endpoint DLP – Monitors and controls data on end-user devices. 2. Network DLP – Monitors data in transit across the network. 3. Storage DLP – Secures data at rest in storage systems. DLP is especially important for protecting PII, PHI, financial records, and intellectual property, and helps organizations comply with laws like GDPR, HIPAA, and PCI-DSS.

Answer 42

Domain-based Message Authentication

Answer 43

Destination Network Address Translation

Answer 44

Domain Name System

Answer 45

Data Protection Officer A DPO acts as the data privacy watchdog within an organization, protecting individuals’ personal information and guiding the business in staying compliant with privacy laws.

Answer 46

Disaster Recovery Plan A documented, structured approach with instructions for responding to unplanned incidents that threaten an organization’s IT systems, data, and operations. The goal of a DRP is to restore critical systems and operations as quickly and efficiently as possible after a disaster such as: • Natural disasters (e.g., floods, earthquakes) • Cyberattacks (e.g., ransomware) • Power outages • Hardware failures Key Components of a DRP: 1. Recovery Time Objective (RTO): Maximum acceptable time to restore a system after a disruption. 2. Recovery Point Objective (RPO): Maximum acceptable amount of data loss measured in time. 3. Business Impact Analysis (BIA): Identifies critical systems and the impact of their downtime. 4. Backups and Redundancy: Regular data backups, hot/cold sites, and failover systems. 5. Roles and Responsibilities: Defines who does what during a disaster. 6. Communication Plan: Procedures for informing stakeholders during a crisis. 7. Testing and Maintenance: Regular testing and updates to ensure effectiveness. A DRP is a part of a broader Business Continuity Plan (BCP).

Answer 47

Digital Signature Algorithm A Federal Information Processing Standard (FIPS) for digital signatures that ensures data integrity and authenticity. It is part of the Digital Signature Standard (DSS) and was developed by NIST. Key Features of DSA: 1. Purpose: • Used to digitally sign data, not to encrypt it. • Ensures authentication, integrity, and non-repudiation. 2. Asymmetric Encryption: • Uses a private key to sign. • Uses a public key to verify. 3. Process Overview: • The sender hashes the message. • The sender signs the hash using their private key. • The receiver verifies the signature using the sender’s public key. 4. Algorithms Involved: • Uses mathematical functions such as modular exponentiation and discrete logarithms. 5. Limitations: • Slower than RSA for verification. • Often paired with SHA (Secure Hash Algorithm) for hashing. DSA is commonly used in government and secure communications.

Answer 48

Digital Subscriber Line

Answer 49

Denial of Service A Denial of Service (DoS) attack is a cyberattack where an attacker floods or overloads a system, server, or network with excessive traffic or requests, causing it to become slow, unresponsive, or completely unavailable to legitimate users. ⸻ Explanation: • The goal is to disrupt normal operations of a service, often temporarily. • A single system typically launches a DoS attack. • Can target websites, applications, servers, or network infrastructure. • Different methods include flood attacks, crashing services, or resource exhaustion. ⸻ Example: A hacker sends thousands of fake requests per second to a company’s website server, overwhelming it. Real customers can no longer access the website to make purchases or get support — causing business downtime and reputation damage. ⸻ Types of DoS Attacks: • Ping Flood • SYN Flood • Application Layer Attacks ⸻ Real-World Analogy: Imagine a small café that can seat 20 people. An attacker sends 100 fake customers to fill the seats and block the entrance, preventing real customers from getting in — even though the café is technically “open.”

Answer 50

Extensible Authentication Protocol Definition: Extensible Authentication Protocol (EAP) Extensible Authentication Protocol (EAP) is a framework used for providing flexible authentication methods over network connections, especially in wireless and point-to-point communication. ⸻ Explanation: • EAP is not a specific authentication method, but a framework that supports multiple authentication mechanisms such as: • Passwords • Digital certificates • Smart cards • One-time passwords (OTP) • Commonly used in: • Wi-Fi authentication (especially with WPA2-Enterprise/WPA3-Enterprise) • VPNs • Remote access services ⸻ EAP Methods (Examples): 1. EAP-TLS (Transport Layer Security): Uses digital certificates for mutual authentication. Highly secure. 2. EAP-TTLS (Tunneled TLS): Uses certificates only on the server side, then tunnels inner authentication (e.g., passwords). 3. PEAP (Protected EAP): Encapsulates EAP in a TLS tunnel to protect the authentication exchange. 4. EAP-MSCHAPv2: Uses username and password for authentication, often within PEAP. ⸻ Example Scenario: When connecting to a corporate Wi-Fi network: • Your device is prompted for a username and password. • The network uses PEAP with EAP-MSCHAPv2 to authenticate you securely. • Once validated, you’re granted access to the internal network. ⸻ Real-World Analogy: Think of EAP as a blank form template—it allows various ways to fill it out (passwords, certificates, smart cards) depending on what kind of verification is required.

Answer 51

Electronic Code Book

Answer 52

Elliptic Curve Cryptography Definition: Elliptic Curve Cryptography (ECC) Elliptic Curve Cryptography (ECC) is an asymmetric encryption technique that uses the mathematics of elliptic curves over finite fields to create secure, efficient cryptographic keys. ⸻ Explanation: • ECC provides high levels of security with smaller key sizes compared to other algorithms like RSA. • It is used for encryption, digital signatures, and key exchange. • ECC is efficient in processing power, memory, and bandwidth, making it ideal for mobile devices, IoT, and embedded systems. ⸻ Key Features: • Smaller key size: ECC-256 (256-bit key) is as secure as RSA-3072. • Faster computations: Speeds up encryption/decryption processes. • Lower resource usage: Ideal for systems with limited power or memory. ⸻ Example Use Cases: 1. Mobile Apps & Messaging: Secure messaging apps like Signal use ECC for end-to-end encryption. 2. TLS/SSL Certificates: Websites using HTTPS may use ECC-based certificates for secure connections. 3. Cryptocurrencies: Bitcoin and Ethereum use ECC for generating wallets and signing transactions. ⸻ Real-World Analogy: Imagine ECC as a stronger, smaller lock on a door. It takes less material to make but provides just as much (or more) protection than a big, bulky lock (like RSA).

Answer 53

Elliptic Curve Diffie-Hellman Ephemeral Definition: Elliptic Curve Diffie-Hellman Ephemeral (ECDHE) Elliptic Curve Diffie-Hellman Ephemeral (ECDHE) is a key exchange protocol that uses Elliptic Curve Cryptography (ECC) to securely exchange cryptographic keys over an untrusted communication channel. The “ephemeral” part refers to the use of temporary, one-time keys, ensuring that each session uses a fresh key pair. ⸻ Explanation: • ECDHE allows two parties to securely share a shared secret without transmitting it directly. • The term “ephemeral” means that the keys are generated and used only for a single session, then discarded, making it more secure because even if an attacker gains access to the keys after the session, they cannot decrypt past communications. • ECDHE is part of the Diffie-Hellman family of protocols, which allows both parties to generate a shared secret without prior knowledge of each other’s keys. How ECDHE Works: 1. Key Generation: Each party generates a public-private key pair based on elliptic curve mathematics. 2. Key Exchange: The parties exchange their public keys. 3. Shared Secret Creation: Using their private key and the other party’s public key, each party independently computes the shared secret. 4. Session Key Creation: The shared secret is then used to generate symmetric encryption keys for the communication session. Since ephemeral keys are used, each session is uniquely secured, and the keys aren’t reused, ensuring better forward secrecy. ⸻ Example Use Case: 1. HTTPS/TLS Connections: When connecting to a secure website, the server and client might use ECDHE to exchange keys securely for encrypting the session. This ensures that even if someone intercepts the traffic, they can’t decrypt it later because the session keys are ephemeral (temporary). 2. VPNs: VPN services often use ECDHE to securely establish a tunnel between a client and a server, ensuring that each session uses new, temporary keys for enhanced security. ⸻ Real-World Analogy: Think of ECDHE as sending a secret message in a locked box, where the key to open it is never stored or shared. The key is created just for this one message, and after the message is opened, the key is destroyed. Even if someone intercepts the locked box, they cannot access any previous messages because the key is no longer available. ⸻ Let me know if you want a visual or more details on how ECDHE compares with other key exchange protocols like RSA or DHE

Answer 54

Elliptic Curve Digital Signature Algorithm Definition: Elliptic Curve Digital Signature Algorithm (ECDSA) The Elliptic Curve Digital Signature Algorithm (ECDSA) is an asymmetric cryptographic algorithm used to generate digital signatures for verifying the authenticity and integrity of a message or document, using Elliptic Curve Cryptography (ECC). ⸻ Explanation: • ECDSA is a variation of the Digital Signature Algorithm (DSA) that uses elliptic curve mathematics to provide strong security with smaller key sizes, making it efficient for systems with limited resources, such as mobile devices or embedded systems. • ECDSA is widely used in cryptocurrencies (like Bitcoin), TLS/SSL certificates, and other secure communication protocols to ensure data has not been tampered with and to confirm the identity of the sender. ⸻ How ECDSA Works: 1. Key Generation: • The user generates an elliptic curve key pair: a private key (kept secret) and a public key (shared with others). 2. Signing Process: • The sender hashes the message (using a cryptographic hash function like SHA-256). • The sender uses their private key to create a digital signature of the hash. • The resulting digital signature is attached to the message. 3. Verification Process: • The recipient hashes the received message. • They use the sender’s public key to verify the digital signature, ensuring that the message has not been altered and confirming the sender’s identity. ⸻ Advantages of ECDSA: • Smaller Key Sizes: ECDSA requires smaller key sizes compared to other algorithms like RSA, making it faster and more efficient. • Strong Security: Despite smaller keys, ECDSA offers strong security and is considered highly secure for modern cryptographic needs. • Efficient in Low-Resource Environments: ECDSA is particularly effective for devices with limited processing power, such as mobile phones, smartcards, or IoT devices. ⸻ Example Use Cases: 1. Cryptocurrency Transactions: • In Bitcoin and other cryptocurrencies, ECDSA is used to sign transactions, ensuring that only the owner of the private key can send funds from their wallet. 2. SSL/TLS Certificates: • ECDSA is used in SSL/TLS certificates for websites, enabling secure communication between a web server and a client. 3. Digital Document Signing: • ECDSA can be used to sign and verify the authenticity of digital contracts, messages, or software downloads. ⸻ Real-World Analogy: Think of ECDSA as a sealed envelope with a signature: • The sender uses a private key (a personal seal) to sign the envelope. • The recipient can check the authenticity of the signature with the sender’s public key, ensuring the envelope has not been tampered with and truly came from the sender.

Answer 55

Endpoint Detection and Response

Answer 56

Encrypted File System

Answer 57

Enterprise Resource Planning

Answer 58

Institute of Electrical and Electronics Engineers

Answer 59

Internet Key Exchange

Answer 60

Instant Messaging

Answer 61

Internet Message Access Protocol

Answer 62

Internet Protocol

Answer 63

Intrusion Prevention System

Answer 64

Internet Protocol Security

Answer 65

Incident Response

Answer 66

Indicators of Compromise

Answer 67

Internet of Things

Answer 68

Electronic Serial Number

Answer 69

Internet Relay Chat

Answer 70

Encapsulated Security Payload

Answer 71

Incident Response Plan

Answer 72

File System Access Control List

Answer 73

International Standards Organization

Answer 74

Full Disk Encryption

Answer 75

Internet Service Provider

Answer 76

File Integrity Management

Answer 77

Information Systems Security Officer

Answer 78

Field Programmable Gate Array

Answer 79

Initialization Vector

Answer 80

False Rejection Rate

Answer 81

Key Distribution Center

Answer 82

File Transfer Protocol

Answer 83

Key Encryption Keyrv 🔐 KEK – Key Encryption Key ✅ What it means (plain language): A KEK is a special password (or cryptographic key) used not to protect files or messages directly, but to protect other keys that do protect those files or messages. Think of it like this: 🔑 A Data Encryption Key (DEK) locks your valuables (like a safe with your files). 🧰 A KEK locks the key to the safe — keeping it secure in case someone finds it. ⸻ 💡 Real-life example: Imagine you’re a manager at a company that stores employee records in a digital vault. • Each file is encrypted with a DEK (a file-specific password). • But the DEKs are stored in a central secure system. • To make sure no one can just grab those DEKs, the system encrypts the DEKs using a KEK. So even if someone hacks into the system and gets a DEK, they can’t use it unless they also have access to the KEK — the master lock. ⸻ 🔁 Why it’s important for CompTIA TAS: In enterprise environments, managing and protecting encryption keys is just as critical as protecting the data itself. KEKs help reduce risk by adding a secure layer to key management systems.

Answer 84

Secured File Transfer Protocol

Answer 85

Layer 2 Tunneling Protocol

Answer 86

Galois Counter Mode

Answer 87

Local Area Network

Answer 88

General Data Protection Regulation

Answer 89

Lightweight Directory Access Protocol

Answer 90

Gnu Privacy Guard

Answer 91

Lightweight Extensible Authentication Protocol

Answer 92

Group Policy Object

Answer 93

Global Positioning System

Answer 94

Monitoring as a Service

Answer 95

Graphics Processing Unit

Answer 96

Mandatory Access Control

Answer 97

Media Access Control

Answer 98

Message Authentication Code

Answer 99

Generic Routing Encapsulation

Answer 100

High Availability

Answer 101

Hard Disk Drive

Answer 102

Metropolitan Area Network

Answer 103

Host-based Intrusion Detection System

Answer 104

Master Boot Record

Answer 105

Host-based Intrusion Prevention System

Answer 106

Message Digest 5

Answer 107

Hashed Message Authentication Code

Answer 108

Main Distribution Frame

Answer 109

HMAC-based One-time Password

Answer 110

Mobile Device Management

Answer 111

Hardware Security Module

Answer 112

Multifactor Authentication

Answer 113

Hypertext Markup Language

Answer 114

Multifunction Device

Answer 115

Hypertext Transfer Protocol

Answer 116

Multifunction Printer

Answer 117

Hypertext Transfer Protocol Secure

Answer 118

Machine Learning

Answer 119

Heating, Ventilation Air Conditioning

Answer 120

Multimedia Message Service

Answer 121

Infrastructure as a Service

Answer 122

Memorandum of Agreement

Answer 123

Infrastructure as Code

Answer 124

Memorandum of Understanding

Answer 125

Identity and Access Management

Answer 126

Multi-protocol Label Switching

Answer 127

Internet Control Message Protocol

Answer 128

Master Service Agreement

Answer 129

Industrial Control Systems

Answer 130

Microsoft Challenge Handshake Authentication Protocol

Answer 131

International Data Encryption Algorithm

Answer 132

Intermediate Distribution Frame

Answer 133

Managed Service Provider

Answer 134

Identity Provider

Answer 135

Managed Security Service Provider

Answer 136

Intrusion Detection System

Answer 137

Mean Time Between Failures

Answer 138

Mean Time to Failure

Answer 139

Mean Time to Recover

Answer 140

Maximum Transmission Unit

Answer 141

Network Access Control

Answer 142

Network Address Translation

Answer 143

Non-disclosure Agreement

Answer 144

Near Field Communication

Answer 145

Next-generation Firewall

Answer 146

Network-based Intrusion Detection System

Answer 147

Network-based Intrusion Prevention System

Answer 148

National Institute of Standards & Technology

Answer 149

New Technology File System

Answer 150

New Technology LAN Manager

Answer 151

Network Time Protocol

Answer 152

Open Authorization

Answer 153

Online Certificate Status Protocol

Answer 154

Object Identifier

Answer 155

Operating System

Answer 156

Open-source Intelligence

Answer 157

Open Shortest Path First

Answer 158

Operational Technology

Answer 159

Over the Air

Answer 160

Open Vulnerability Assessment Language

Answer 161

Peer to Peer

Answer 162

Platform as a Service

Answer 163

Proxy Auto Configuration

Answer 164

Privileged Access Management

Answer 165

Pluggable Authentication Modules

Answer 166

Password Authentication Protocol

Answer 167

Port Address Translation

Answer 168

Password-based Key Derivation Function 2

Answer 169

Private Branch Exchange

Answer 170

Packet Capture

Answer 171

DSS Payment Card Industry Data Security Standard

Answer 172

Power Distribution Unit

Answer 173

Protected Extensible Authentication Protocol

Answer 174

Personal Electronic Device

Answer 175

Privacy Enhanced Mail

Answer 176

Perfect Forward Secrecy

Answer 177

Pretty Good Privacy

Answer 178

Personal Health Information

Answer 179

Personally Identifiable Information

Answer 180

Personal Identity Verification

Answer 181

Public Key Cryptography Standards

Answer 182

Public Key Infrastructure

Answer 183

Post Office Protocol

Answer 184

Plain Old Telephone Service

Answer 185

Point-to-Point Protocol

Answer 186

Definition

Answer 187

Point-to-Point Tunneling Protocol

Answer 188

Pre-shared Key

Answer 189

Pan-tilt-zoom

Answer 190

Potentially Unwanted Program

Answer 191

Recovery Agent

Answer 192

Registration Authority

Answer 193

Research and Development in Advanced Communications Technologies in Europe

Answer 194

Rapid Application Development

Answer 195

Remote Authentication Dial-in User Service

Answer 196

Redundant Array of Inexpensive Disks

Answer 197

Remote Access Server

Answer 198

Remote Access Trojan

Answer 199

Role-based Access Control

Answer 200

Rule-based Access Control

Answer 201

Rivest Cipher version 4

Answer 202

Remote Desktop Protocol

Answer 203

Radio Frequency Identifier

Answer 204

RACE Integrity Primitives Evaluation Message Digest

Answer 205

Return on Investment

Answer 206

Recovery Point Objective

Answer 207

Remotely Triggered Black Hole

Answer 208

Recovery Time Objective

Answer 209

Real-time Operating System

Answer 210

Real-time Transport Protocol

Answer 211

Secure/Multipurpose Internet Mail Extensions

Answer 212

Software as a Service

Answer 213

Simultaneous Authentication of Equals

Answer 214

Security Assertions Markup Language

Answer 215

Storage Area Network

Answer 216

Subject Alternative Namev SAN – Subject Alternative Name ✅ What it means (plain language): SAN is an extension to an SSL/TLS certificate that allows you to secure multiple domain names or IP addresses with a single certificate. Instead of needing a separate certificate for each website or service, SAN lets you list them all in one. ⸻ 💡 Real-life example: Suppose a company owns: • www.example.com • mail.example.com • shop.example.net Normally, they’d need separate certificates for each. But with a SAN certificate, all those domains can be protected under one certificate. This saves time, money, and simplifies certificate management. ⸻ 🏢 Real-world use case: In an enterprise, you might have: • A main website • An internal HR portal • A customer-facing app • An email server All hosted under different subdomains or even different domains. Rather than managing 4+ certificates, the company uses a SAN certificate that lists all of them. That way, secure connections (HTTPS) work seamlessly across all systems — and users don’t get scary browser warnings. ⸻ 🔐 Why it matters for CompTIA TAS: SANs are essential in public key infrastructure (PKI) and help with efficient certificate lifecycle management — a key topic in enterprise security architecture.

Answer 217

Secure Access Service Edge

Answer 218

Supervisory Control and Data Acquisition

Answer 219

Security Content Automation Protocol

Answer 220

Simple Certificate Enrollment Protocol

Answer 221

Software-defined Wide Area Network

Answer 222

Software Development Kit

Answer 223

Software Development Lifecycle

Answer 224

Software Development Lifecycle Methodology

Answer 225

Software-defined Networking

Answer 226

Time-based One-time Password

Answer 227

Security-enhanced Linux

Answer 228

Time-of-use

Answer 229

Self-encrypting Drives

Answer 230

Trusted Platform Module

Answer 231

Structured Exception Handler

Answer 232

Secured File Transfer Protocol

Answer 233

Transaction Signature

Answer 234

Secure Hashing Algorithm

Answer 235

User Acceptance Testing

Answer 236

Secure Hypertext Transfer Protocol

Answer 237

Definition

Answer 238

Unmanned Aerial Vehicle

Answer 239

Security Information and Event Management

Answer 240

User Datagram Protocol

Answer 241

Subscriber Identity Module

Answer 242

Unified Extensible Firmware Interface

Answer 243

Service-level Agreement

Answer 244

Unified Endpoint Management

Answer 245

Single Loss Expectancy

Answer 246

Uninterruptable Power Supply

Answer 247

Short Message Service

Answer 248

Uniform Resource Identifier

Answer 249

Simple Mail Transfer Protocol

Answer 250

Universal Resource Locator

Answer 251

Simple Mail Transfer Protocol Secure

Answer 252

Universal Serial Bus

Answer 253

Simple Network Management Protocol

Answer 254

USB On the Go

Answer 255

Simple Object Access Protocol

Answer 256

Unified Threat Management

Answer 257

Security Orchestration, Automation, Response

Answer 258

Unshielded Twisted Pair

Answer 259

Visual Basic for Applications

Answer 260

System on Chip

Answer 261

Virtual Desktop Environment

Answer 262

Security Operations Center

Answer 263

Virtual Desktop Infrastructure

Answer 264

Statement of Work

Answer 265

Virtual Local Area Network

Answer 266

Sender Policy Framework

Answer 267

Variable Length Subnet Masking

Answer 268

Spam over Internet Messaging

Answer 269

Virtual Machine

Answer 270

Structured Query Language

Answer 271

Voice over IP

Answer 272

SQL Injection

Answer 273

Virtual Private Cloud

Answer 274

Secure Real-Time Protocol

Answer 275

Virtual Private Network

Answer 276

Solid State Drive

Answer 277

Video Teleconferencing

Answer 278

Secure Shell

Answer 279

Web Application Firewall

Answer 280

Secure Sockets Layer

Answer 281

Wireless Access Point

Answer 282

Single Sign-on

Answer 283

Wired Equivalent Privacy

Answer 284

Structured Threat Information eXchange

Answer 285

Wireless Intrusion Detection System

Answer 286

Secure Web Gateway

Answer 287

Wireless Intrusion Prevention System

Answer 288

Terminal Access Controller Access Control System

Answer 289

Work Order

Answer 290

Wi-Fi Protected Access

Answer 291

Trusted Automated eXchange of Indicator Information

Answer 292

Wi-Fi Protected Setup

Answer 293

Wireless TLS

Answer 294

Transmission Control Protocol/Internet Protocol

Answer 295

Extended Detection and Response

Answer 296

Extensible Markup Language

Answer 297

Ticket Granting Ticket

Answer 298

Exclusive Or

Answer 299

Temporal Key Integrity Protocol

Answer 300

Transport Layer Security

Answer 301

Cross-site Request Forgery

Answer 302

Cross-site Scripting

a Flashcards

(332 cards)