Brainscape's Knowledge GenomeTM


Top Flashcards (Certified)
All Flashcards

Vocabulary List > CompTIA Security+ Vocabulary List > Flashcards

CompTIA Security+ Vocabulary List Flashcards

(100 cards)

Start Studying
1
Q

Active Directory

A

Directory service by Microsoft for Windows domain networks.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

AES (Advanced Encryption Standard)

A

Symmetric encryption algorithm.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Application Layer

A

Layer 7 of the OSI model, providing network services to applications.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Anomaly Detection

A

Identifying unusual patterns that do not conform to expected behavior.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Attack Surface

A

Total points where an attacker can try to enter data into or extract data from an environment.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Audit Trail

A

Record of activities to ensure integrity and track changes.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Biometrics

A

Authentication using physical characteristics, like fingerprints or facial recognition.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Authentication Header (AH)

A

IPsec protocol providing connectionless integrity and data origin authentication.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Black Box Testing

A

Testing without knowledge of the internal workings of the application.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Blue Team

A

Group responsible for defending an organization from cyber attacks.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Bollard

A

Physical security device to prevent vehicle-based attacks.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

CCTV (Closed-Circuit Television)

A

Video surveillance system.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Compensating Controls

A

Security controls that provide alternative measures.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Certificate Revocation List (CRL)

A

List of certificates that have been revoked by the Certificate Authority.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Chain of Custody

A

Documentation showing the seizure, custody, control, transfer, analysis, and disposition of evidence.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Ciphertext

A

Encrypted text transformed from plaintext.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Confidentiality

A

Ensuring that information is only accessible to those authorized to have access.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Control Diversity

A

Using different types of controls (administrative, technical, physical) to achieve security.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Data-at-Rest

A

Inactive data stored physically in any digital form.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Data-in-Transit

A

Data actively moving from one location to another.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Degaussing

A

Process of reducing or eliminating a magnetic field, often used to erase data from magnetic storage.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Digital Forensics

A

Process of uncovering and interpreting electronic data.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Elliptic Curve Cryptography (ECC)

A

Encryption algorithm based on elliptic curves over finite fields.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Demilitarized Zone (DMZ)

A

Physical or logical subnetwork that contains and exposes an organization’s external-facing services.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Dumpster Diving
Searching through waste to find confidential information.
19
EAP (Extensible Authentication Protocol)
Framework for transporting authentication protocols.
20
Evil Twin
Rogue wireless access point mimicking a legitimate one.
21
EMI (Electromagnetic Interference)
Disturbance affecting an electrical circuit due to electromagnetic radiation.
22
Escrowed Encryption
Encryption process where decryption keys are held in escrow.
23
File Integrity Monitoring
Process of validating the integrity of operating system and application software files.
24
Federated Identity Management
Linking a user’s electronic identity and attributes, stored across multiple distinct identity management systems.
25
Geofencing
Creating a virtual boundary for a geographic area.
26
Hashcat
Popular password cracking tool.
27
Identity Federation
Linking a single identity across multiple systems.
27
HIPS (Host-based Intrusion Prevention System)
System designed to protect a host from malicious attacks.
27
Hybrid Attack
Combining dictionary and brute-force attacks to crack passwords.
28
HIDS (Host-based Intrusion Detection System)
System that monitors and analyzes the internals of a computing system.
29
Incident Response Plan
Organized approach to addressing and managing the aftermath of a security breach or attack.
29
IDS (Intrusion Detection System)
System that monitors network or system activities for malicious activities.
30
IMAP (Internet Message Access Protocol)
Protocol used by email clients to retrieve messages from a mail server.
31
Kerberos
Network authentication protocol using tickets.
32
IoC (Indicators of Compromise)
Artifacts observed on a network or in an operating system that with high confidence indicate a computer intrusion.
33
KDE (Kernel Density Estimation)
Non-parametric way to estimate the probability density function of a random variable.
33
Least Privilege
Principle of limiting access rights for users to the bare minimum.
33
Key Escrow
Secure storage and recovery of encryption keys.
34
IP Spoofing
Creating IP packets with a forged source IP address.
35
Logic Bomb
Code inserted into a system that sets off a malicious function when specified conditions are met.
35
LDAP (Lightweight Directory Access Protocol)
Protocol for accessing and maintaining distributed directory information services.
36
MAC (Mandatory Access Control)
Access control policy determined by the system.
36
Mantrap
Physical security device that monitors and controls two interlocking doors to a small room.
37
Malware
Software intentionally designed to cause damage.
38
MD5 (Message Digest Algorithm 5)
Widely used cryptographic hash function.
39
MitM (Man-in-the-Middle)
Attack where the attacker secretly intercepts and relays messages.
40
Multi-Tenancy
Architecture where a single instance of software serves multiple customers.
41
NAC (Network Access Control)
Solutions to define and implement a security policy that grants access to network resources.
42
Non-Repudiation
Assurance that someone cannot deny the validity of their actions.
42
Netflow
Network protocol for collecting IP traffic information.
42
NIDS (Network Intrusion Detection System)
System for monitoring and analyzing network traffic.
43
NTLM (NT LAN Manager)
Suite of Microsoft security protocols for authentication.
44
Obfuscation
Making something obscure or unclear.
44
OID (Object Identifier)
Identifier used to name an object.
45
One-Time Pad
Encryption technique that cannot be cracked.
45
OAuth (Open Authorization)
Open standard for access delegation.
46
PAP (Password Authentication Protocol)
Authentication protocol that uses a two-way handshake.
46
OpenID
Decentralized authentication protocol.
46
OWASP (Open Web Application Security Project)
Online community creating freely available security-related resources.
47
Pivoting
Using one compromised system to attack others.
47
Pharming
Redirecting website traffic to another, fraudulent website.
47
PFS (Perfect Forward Secrecy)
Property ensuring that the compromise of one session key does not affect others.
48
Red Team
Group playing the role of an adversary to test security.
48
Rainbow Table
Precomputed table for reversing cryptographic hash functions.
48
Remote Code Execution (RCE)
Executing code remotely on a different system.
49
PTZ (Pan-Tilt-Zoom)
Camera that can be remotely controlled to pan, tilt, and zoom.
50
Smurf Attack
DDoS attack using IP spoofing and ICMP.
50
SOAR (Security Orchestration, Automation, and Response)
Stack of compatible software programs enabling security operations teams to streamline and standardize activities.
50
Sandbox
Isolated environment for running untrusted programs.
50
Residual Risk
Risk remaining after security measures have been applied.
50
SFTP (Secure File Transfer Protocol)
Secure version of FTP using SSH.
51
Rogue AP
Unauthorized wireless access point.
51
Salting
Adding random data to a hash function to ensure unique outputs.
51
SIEM (Security Information and Event Management)
Solution for real-time analysis of security alerts.
51
Spear Phishing
Targeted phishing attack.
51
Shibboleth
Single sign-on (SSO) solution for web resources.
52
SDN (Software-Defined Networking)
Network management approach enabling programmatically efficient network configuration.
53
Spyware
Software that secretly monitors user activity.
54
Syslog
Standard for message logging.
55
Steganography
Concealing messages within other non-secret text or data.
56
SYN Flood
Attack sending a series of SYN requests to consume resources.
57
Threat Hunting
Proactively searching for cyber threats.
57
Tokenization
Replacing sensitive data with unique identification symbols.
58
UEBA (User and Entity Behavior Analytics)
Analyzing user behavior to detect anomalies.
59
Vishing
Phishing conducted through phone calls.
59
Vulnerability Scanner
Tool for identifying security weaknesses.
59
XOR Cipher
Simple symmetric encryption algorithm.
60
War Driving
Searching for Wi-Fi networks by moving around.
61
Worm
Self-replicating malware.
62
YARA
Tool for identifying and classifying malware.
63
Zero Trust
Security concept assuming no implicit trust.
64
Zero-Day Exploit
Exploiting a vulnerability that is not yet known to the vendor.
65
Zoning
Dividing a storage area network (SAN) into logical segments.

Vocabulary List (4 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions