Karteikarten
Security+
Karten in diesem Stapel (200)
- 1AAAAuthentication, Authorization, Accounting
Core security concept where a centralized platform verifies subject identification, ensures subject is assigned relevant permissions, and then logs these actions to create an audit trail. - 2ABACAttribute-Based Access Control
Access control technique that evaluates a set of attributes that each subject possesses to determine if access should be granted. - 3ACLAccess Control List
Collection of access control entries (ACEs) that determines which subjects (user accounts, host IP addresses, etc.) are allowed or denied access to the object and the privileges given (read only, read/write, etc.) - 4AESAdvanced Encryption Standard
A symmetric 128-, 192-, or 256-bit block cipher based on the Rijndael algorithm developed by Belgian cryptographers Joan Daemen and Vincent Rijmen and adopted by the US Govt as its encryption standard to replace DES - 5AHAuthentication Header
IPSec Protocol that provides authentication for the origin of transmitted data as well as integrity and protection against replay attacks. - 6AISAutomated Indicator Sharing
Threat intelligence data feed operated by the DHS. - 7ALEAnnual Loss Expectancy
The total cost of a risk to an organization on an annual basis. This is determined by multiplying the SLE by the annual rate of occurrence (ARO). - 8APAccess Point
A device that provides a connection between wireless devices and can connect to wired networks. Also known as wireless access point or WAP. - 9APIApplication Programming Interface
A library of programming utilities used, for example, to enable software developers to access functions of the TCP/IP network stack under a particular operating system. - 10APTAdvanced Persistent Threat
An attacker's ability to obtain, maintain, and diversify access to network systems using exploits and malware. - 11AROAnnual Rate of Occurrence
In risk calculation, an expression of the probability/likelihood of a risk as the number of times per year a particular loss is expected to occur. - 12ATT&CKAdversarial Tactics, Techniques, and Common Knowledge
A knowledge base maintained by the MITRE Corporation for listing and explaining specific adversary tactics, techniques, and procedures. - 13BASBuilding Automation System
Components and protocols that facilitate the centralized configuration and monitoring of mechanical and electrical systems within offices and data centers. - 14BIABusiness Impact Analysis
A systematic activity that identifies organizational risks and determines their effect on ongoing, mission critical operations. - 15BPABusiness Partnership Agreement
Agreement by two companies to work together closely, such as the partner agreements that large IT companies set up with resellers and solution providers. - 16BPDU GuardBridge Protocol Data Unit Guard
Switch port security feature that disables the port if it receives BPDU notifications related to spanning tree. This is configured on access ports where there any BPDU frames are likely to be malicious. - 17BYODBring Your Own Device
Security framework and tools to facilitate use of personally-owned devices to access corporate networks and data. - 18C&CCommand and Control (C2)
An infrastructure of hosts and services with which attackers direct, distribute, and control malware over botnets. Also known as C2 - 19CACertificate Authority
A server that guarantees subject identities by issuing signed digital certificate wrappers for their public keys. - 20CACCommon Access Card
A smart card that provides certificate-based authentication and supports two-factor authentication. A CAC is produced for Department of Defense employees and contractors in response to a Homeland Security Directive. - 21CAN BusController Area Network Bus
A serial network designed to allow communications between embedded programmable logic controllers. - 22CAPTCHACompletely Automated Public Turing Test to Tell Computers and Humans Apart
An image of text characters or audio of some speech that is difficult for a computer to interpret. CAPTCHAs are used for purposes such as preventing bots from creating accounts on web forums and social media sites to spam them - 23CASBCloud Access Security Broker
Enterprise management software designed to mediate access to cloud services by users across all types of devices - 24CBCCipher Block Chaining
An encryption mode of operation where an exclusive or (XOR) is applied to the first plaintext block - 25CCMPCounter Mode with Cipher Block Chaining Message Authentication Code Protocol
An encryption protocol used for wireless LANs that addresses the vulnerabilities of the WEP protocol - 26CECryptographic Erase
A method of sanitizing a self-encrypting drive by erasing the media encryption key. - 27CERCrossover Error Rate
Describes the overall accuracy rate of a biometric system. As sensitivity of the system increases, FRRs will rise and FARs will drop; conversely, if sensitivity is decreased, FRRs will drop and FARs will increase. - 28CHAPChallenge Handshake Authentication Protocol
Authentication scheme developed for dial-up networks that uses an encrypted three-way handshake to authenticate the client to the server. The challenge-response is repeated throughout the connection (though transparently to the user) to guard against replay attacks. - 29CIAConfidentiality, Integrity, Availability
The three principles of security control and management. Also known as the information security triad. or AIC triad. - 30CISCenter for Internet Security
A not-for-profit organization (founded partly by SANS). It publishes the well-known "Top 20 Critical Security Controls" (or system design recommendations). - 31CNCommon Name
An X500 attribute expressing a host or user name, also used as the subject identifier for a digital certificate. - 32COBOCorporate Owned, Business Only
Enterprise mobile device provisioning model where the device is the property of the organization and personal use is prohibited. - 33CSMContinuous Security Monitoring
The technique of constantly evaluating an environment for changes so that new risks may be more quickly detected and business operations improved upon. Also known as continuous security monitoring or CSM. - 34COPECorporate Owned, Personally Enabled
Enterprise mobile device provisioning model where the device remains the property of the organization, but certain personal use, such as private email, social networking, and web browsing, is permitted. - 35CTMCounter Mode
An encryption mode of operation where a numerical counter value is used to create a constantly changing IV. Also referred to as CTM (counter mode) and CM (counter mode). - 36CRLCertificate Revocation List
List of certificates revoked before their expiration date. - 37CSPCloud Service Provider
A vendor offering public cloud service models, such as PaaS, IaaS, or SaaS. - 38CSRCertificate Signing Request
A Base64 ASCII file that a subject sends to a CA to get a certificate. - 39CTICyber Threat Intelligence
The process of investigating, collecting, analyzing, and disseminating information about emerging threats and threat sources. Also known as threat intelligence. - 40CVECommon Vulnerabilities and Exposures
Scheme for identifying vulnerabilities developed by MITRE and adopted by NIST - 41CVSSCommon Vulnerability Scoring System
A risk management approach to quantifying vulnerability data and then taking into account the degree of risk to different types of systems or information. - 42CYODChoose Your Own Device
Enterprise mobile device provisioning model where employees are offered a selection of corporate devices for work and, optionally, private use. - 43DACDiscretionary Access Control
Access control model where each resource is protected by an Access Control List (ACL) managed by the resource's owner (or owners). - 44DDoSDistributed Denial of Service
An attack that uses multiple compromised hosts (a botnet) to overwhelm a service with request or response traffic. - 45DERDistinguished Encoding Rules
Binary format used to structure the info in a digital certificate. - 46DHDiffie-Hellman
Cryptographic technique providing secure key exchange - 47DLPData Loss (Leak) Prevention
A software solution that detects and prevents sensitive information from being stored on unauthorized systems or transmitted over unauthorized networks - 48DMZDemilitarized Zone
A segment isolated from the rest of a private network by one or more firewalls that accepts connections from the Internet over designated ports. - 49DNATDestination Network Address Translation
NAT service where private internal addresses are mapped to one or more public addresses to facilitate Internet connectivity for hosts on a local network via a router. - 50DNS HijackingAn attack in which an attacker modifies a computer's DNS configurations to point to a malicious DNS server.
- 51DNS PoisoningA network-based attack where an attacker exploits the traditionally open nature of the DNS system to redirect a domain name to an IP address of the attacker's choosing.
- 52DNSSECDomain Name System Security Extensions
A security protocol that provides authentication of DNS data and upholds DNS data integrity. - 53DPOData Privacy Officer
Institutional data governance role with responsibility for compliant collection and processing of personal and sensitive data. - 54DRPDisaster Recovery Plan
A documented and resourced plan showing actions and responsibilities to be used in response to critical incidents - 55DSADigital Signature Algorithm
public key encryption standard used for digital signatures that provides authentication and integrity verification for messages. - 56EAPExtensible Authentication Protocol
Framework for negotiating authentication methods that enables systems to use hardware-based identifiers, such as fingerprint scanners or smart card readers, for authentication - 57EAP-FASTEAP Flexible Authentication via Secure Tunneling
An EAP method that is expected to address the shortcomings of LEAP - 58EAPoLExtensible Authentication Protocol over LAN
A port-based network access control (PNAC) mechanism that allows the use of EAP authentication when a host connects to an Ethernet switch. - 59EAP-TLSEAP Transport Layer Security
An EAP method that requires server-side and client-side certificates for authentication using SSL/ TLS. - 60EAP-TTLSEAP Tunneled Transport Layer Security
An EAP method that enables a client and server to establish a secure connection without mandating a client-side certificate. - 61ECCElliptical Curve Cryptography
An asymmetric encryption algorithm that leverages the algebraic structures of elliptic curves over finite fields to derive public/private key pairs - 62EDREndpoint Detection and Response
A software agent that collects system data and logs for analysis by a monitoring system to provide early detection of threats. - 63EFExposure Factor
In risk calculation, the percentage of an asset's value that would be lost during a security incident or disaster scenario. - 64EOLEnd of Life
Product life cycle phase where sales are discontinued and support options reduced over time. - 65EOSLEnd of Service Life
Product life cycle phase where support is no longer available from the vendor. - 66EPPEndpoint Protection Platform
A software agent and monitoring system that performs multiple security tasks. - 67ERMEnterprise Risk Management
The comprehensive process of evaluating, measuring, and mitigating the many risks that pervade an organization. - 68ESPEncapsulating Security Protocol
IPSec sub-protocol that enables encryption and authentication of the header and payload of a data packet - 69FARFalse Acceptance Rate
Biometric assessment metric that measures the number of unauthorized users who are mistakenly allowed access. - 70FCFibre Channel
High-speed network communications protocol used to implement SANs - 71FDEFull Disk Encryption
Encryption of all data on a disk (including system files, temporary files, and the pagefile) can be accomplished via a supported OS, third-party software, or at the controller level by the disk device itself. - 72FIMFile Integrity Monitoring
A type of software that reviews system files to ensure that they have not been tampered with - 73FPGAField Programmable Gate Array
A processor that can be programmed to perform a specific function by a customer rather than at the time of manufacture. - 74FRRFalse Rejection Rate
Biometric assessment metric that measures the number of valid subjects who are denied access. - 75FTKForensic Tool Kit
Commercial digital forensics investigation management and utilities suite, published by AccessData. - 76FTPSFile Transfer Protocol with TLS
Type of FTP using TLS for confidentiality - 77GCMGalois/Counter Mode
A mode of block chained encryption that provides message authenticity for each block. - 78GDPRGeneral Data Protection Regulation
Provisions and requirements protecting the personal data of European Union (EU) citizens. Transfers of personal data outside the EU Single Market are restricted unless protected by like-for-like regulations, such as the US's Privacy Shield requirements. - 79GPOGroup Policy Object
On a Windows domain, a way to deploy per-user and per-computer settings such as password policy, account restrictions, firewall status, and so on. - 80HAHigh Availability
The property that defines how closely systems approach the goal of providing data availability 100 percent of the time while maintaining a high level of system performance. - 81HMACHash-Based Message Authentication Code
A method used to verify both the integrity and authenticity of a message by combining a cryptographic hash of the message with a secret key. - 82HOTPHMAC-Based One-Time Password
An algorithm that generates a one-time password using a hash-based authentication code to verify the authenticity of the message - 83HSMHardware Security Module
An appliance for generating and storing cryptographic keys. This sort of solution may be less susceptible to tampering and insider threats than software-based storage - 84HTML5 VPNHTML5 Virtual Private Network
Using features of HTML5 to implement remote desktop/VPN connections via browser software (clientless). - 85IaaSInfrastructure as a Service
A computing method that uses the cloud to provide any or all infrastructure needs - 86IaCInfrastructure as Code
A provisioning architecture in which deployment of resources is performed by scripted automation and orchestration. - 87IAMIdentity and Access Management
A security process that provides identification, authentication, and authorization mechanisms for users, computers, and other entities to work with organizational assets like networks, operating systems, and applications. - 88ICSIndustrial Control System
A network managing embedded devices (computer systems that are designed to perform a specific, dedicated function). - 89IdPIdentity Provider
In a federated network, the service that holds the user account and performs authentication - 90IDSIntrusion Detection System
A passive software and/or hardware system that scans, audits, and monitors the security infrastructure for signs of attacks in progress. - 91IEEE 802.1XA standard for encapsulating EAP communications over a LAN (EAPoL) to implement port-based authentication.
- 92IKEInternet Key Exchange
Framework for creating a Security Association (SA) used with IPSec. An SA establishes that two hosts trust one another (authenticate) and agree secure protocols and cipher suites to use to exchange data. - 93IoCIndicator of Compromise
A sign that an asset or network has been attacked or is currently under attack. - 94IPAMIP Address Management
Software consolidating management of multiple DHCP and DNS services to provide oversight into IP address allocation across an enterprise network. - 95IPFIXIP Flow Information Export
Standards-based version of the Netflow framework - 96IPSIntrusion Prevention System
An IDS that actively blocks attacks in addition to detecting them. - 97IPSecInternet Protocol Security
A set of open, non-proprietary standards that are used to secure data through authentication and encryption as the data travels across the network or the Internet. - 98IRPIncident Response Plan
Specific procedures that must be performed if a certain type of event is detected or reported. - 99ISAInterconnection Security Agreement
Any federal agency interconnecting its IT system to a third-party must create an ISA to govern the relationship. An ISA sets out a security risk awareness process and commit the agency and supplier to implementing security controls. - 100ISACInformation Sharing and Analysis Center
Not-for-profit group set up to share sector-specific threat intelligence and security best practices amongst its members. - 101ISO/IEC 27KInternational Organization for Standardization 27000 Series
A comprehensive set of standards for information security, including best practices for security and risk management, compliance, and technical implementation. - 102ISO/IEC 31KInternational Organization for Standardization 31000 Series
A comprehensive set of standards for enterprise risk management. - 103IV AttackInitialization Vector Attack
A wireless attack where the attacker is able to predict or control the IV of an encryption process, thus giving the attacker access to view the encrypted data that is supposed to be hidden from everyone else except the user or network. - 104L2TPLayer 2 Tunneling Protocol
VPN Protocol for tunneling PPP sessions across a variety of network protocols such as IP, FrameRelay, or ATM. - 105LDAPLightweight Directory Access Protocol
A network protocol used to access network directory databases, which store information about authorized users and their privileges, as well as other organizational information. - 106LDAPSLightweight Directory Access Protocol Secure
Method of implementing LDAP using SSL/TLS encryption - 107LEAPLightweight Extensible Authentication Protocol
Cisco's proprietary EAP implementation - 108LLRLessons Learned Report
An analysis of events that can provide insight into how to improve response processes in the future. Also known as after action report or AAR. - 109MaaSMonitoring as a Service
Cloud service providing ongoing security and availability monitoring of on-premises and/or cloud-based hosts and services. - 110MACMandatory Access Control
Access control model where resources are protected by inflexible, system defined rules. Resources (objects) and users (subjects) are allocated a clearance level (or label). - 111MAC (Authentication)Message Authentication Code
Proving the integrity and authenticity of a message by combining its hash with a shared secret - 112MAMMobile Application Management
Enterprise management function that enables control over apps and storage for mobile devices and other endpoints. - 113MD5Message Digest Algorithm v5
A cryptographic hash function producing a 128-bit output. - 114MDMMobile Device Management
The process and supporting technologies for tracking, controlling, and securing the organization's mobile infrastructure. - 115MEFMission Essential Function
A business or organizational activity that is too critical to be deferred for anything more than a few hours, if at all. - 116MFAMultifactor Authentication
An authentication scheme that requires the user to present at least two different factors as credentials, from something you know, something you have, something you are, something you do, and somewhere you are. Specifying two factors is known as 2FA. - 117MitBMan-in-the-Browser
An attack when the web browser is compromised by installing malicious plug-ins or scripts, or intercepting API calls between the browser process and DLLs. - 118MitMMan-in-the-Middle
A form of eavesdropping where the attacker makes an independent connection between two victims and steals information to use fraudulently. - 119MMSMultimedia Messaging Service
Extension to SMS allowing digital data (picture, video, or audio) to be sent over a cellular data connection. - 120MoUMemorandum of Understanding
Usually a preliminary or exploratory agreement to express an intent to work together that is not legally binding and does not involve the exchange of money. - 121MPLSMultiprotocol Label Switching
Developed by Cisco from ATM as a means of providing traffic engineering (congestion control), Class of Service, and Quality of Service within a packet switched, rather than circuit switched, network. - 122MSAMeasurement Systems Analysis
Evaluates the data collection and statistical methods used by a quality management process to ensure they are robust. - 123MSSPManaged Security Service Provider
Third-party provision of security configuration and monitoring as an outsourced service. - 124MTBFMean Time Before Failure
The rating on a device or component that predicts the expected time between failures. - 125MTDMaximum Tolerable Downtime
The longest period of time a business can be inoperable without causing irrevocable business failure. - 126MTTFMean Time to Failure
The average time a device or component is expected to be in operation. - 127MTTRMean Time to Repair/Replace/Recover
The average time taken for a device or component to be repaired, replaced, or otherwise recover from a failure. - 128NACNetwork Access Control
A general term for the collected protocols, policies, and hardware that authenticate and authorize access to a network at the device level. - 129NATNetwork Address Translation
A routing mechanism that conceals internal addressing schemes from the public Internet by translating between a single public address on the external side of a router and private, non-routable addresses internally. - 130NDANon-Disclosure Agreement
An agreement that stipulates that entities will not share confidential information, knowledge, or materials with unauthorized third parties. - 131NFCNear Field Communication
A standard for peer-to-peer (2-way) radio communications over very short (around 4") distances, facilitating contactless payment and similar technologies. NFC is based on RFID. - 132NFVNetwork Functions Virtualization
Provisioning virtual network appliances, such as switches, routers, and firewalls, via VMs and containers. - 133NGFWNext-Generation Firewall
Advances in firewall technology, from app awareness, user-based filtering, and intrusion prevention to cloud inspection. Also known as layer 7 firewall - 134NTLM AuthenticationNT LAN Manager Authentication
A challenge-response authentication protocol created by Microsoft for use in its products. - 135NVDNational Vulnerability Database
US govt repository of standards-based vulnerability management data represented using the Security Content Automation Protocol. Data enables automation of vulnerability management, security measurement, and compliance. - 136OATHInitiative for Open Authentication
An industry body comprising the main PKI providers, such as Verisign and Entrust, that was established with the aim of developing an open, strong authentication framework - 137OAuthOpen Authentication
Standard for federated identity management, allowing resource servers or consumer sites to work with user accounts created and managed on a separate identity provider. - 138OCSPOnline Certificate Status Protocol
Allows clients to request the status of a digital certificate, to check whether it is revoked. - 139OIDCOpenID Connect
An authentication layer that sits on top of the OAuth 2.0 authorization protocol. - 140OIDObject Identifier
Numeric schema used for attributes of digital certificates. - 141OOBOut-of-Band Management
Accessing the administrative interface of a network appliance using a separate network from the usual data network. This could use a separate VLAN or a different kind of link, such as a dial-up modem. - 142OSINTOpen-Source Intelligence
Publicly available information plus the tools used to aggregate and search it. - 143OTOperational Technology
A communications network designed to implement an industrial control system rather than data networking. - 144OTAOver-the-Air
A firmware update delivered on a cellular data connection. output encoding Coding methods to sanitize output created from user input. - 145OWASPOpen Web Application Security Project
A charity and community publishing a number of secure application development resources. - 146P12Public Key Cryptography Standard #12
Format that allows a private key to be exported along with its digital certificate. - 147P7BFile format for transmitting a chain of digital certificates, using PKCS#7
- 148PaaSPlatform as a Service
Computing method that uses the cloud to provide any platform-type services for applications. - 149PAMPluggable Authentication Module
Framework for implementing authentication providers in Linux. - 150PAM (Access Control)Privileged Access Manager
Software for controlling privileged access to applications and processes. - 151PATPort Address Translation
Maps private host IP addresses onto a single public IP address. Each host is tracked by assigning it a random high TCP port for communications. Also known as network address port translation (NAPT) or NAT overloading. - 152PCI DSSPayment Card Industry Data Security Standard
Information security standard for organizations that process credit or bank card payments. - 153PDUPower Distribution Unit
Advanced strip socket that provides filtered output voltage. A managed unit supports remote administration. - 154PEAPProtected Extensible Authentication Protocol
EAP implementation that uses a server-side certificate to create a secure tunnel for user authentication, referred to as the inner method. - 155PEMPrivacy-Enhanced Mail
Base64 encoding scheme used to store certificate and key data as ASCII text. - 156PFSPerfect Forward Secrecy
A characteristic of transport encryption that ensures if a key is compromised the compromise will only affect a single session and not facilitate recovery of plaintext data from other sessions. - 157PFXPersonal Information Exchange
Windows file format for storing a private key and certificate data. The file can be password-protected. - 158PHIPersonal/Protected Health Information
Information that identifies someone as the subject of medical and insurance records, plus associated hospital and laboratory test results. - 159PIIPersonally Identifiable Information
Data that can be used to identify or contact an individual (or in the case of identity theft, to impersonate them). - 160PIVPersonal Identity Verification Card
A smart card that meets the standards for FIPS 201, in that it is resistant to tampering and provides quick electronic authentication of the card's owner. - 161PKCSPublic Key Cryptography Standards
Series of standards defining the use of certificate authorities and digital certificates. - 162PKIPublic Key Infrastructure
Framework of certificate authorities, digital certificates, software, services, and other cryptographic components deployed for the purpose of validating subject identities. - 163PNACPort-Based Network Access Control
A switch (or router) that performs some sort of authentication of the attached device before activating the port. - 164PPPPoint-to-Point Protocol
Dial-up protocol working at layer 2 (Data Link) used to connect devices remotely to networks. - 165PPTPPoint-to-Point Tunneling Protocol
Developed by Cisco and Microsoft to support VPNs over PPP and TCP/IP. PPTP is highly vulnerable to password cracking attacks and considered obsolete. - 166PSKPre-Shared Key
Passphrase-based mechanism to allow group authentication to a wireless network. The passphrase is used to derive an encryption key. - 167PtHPass the Hash
A network-based attack where the attacker steals hashed user credentials and uses them as-is to try to authenticate to the same network the hashed credentials originated on. - 168PUPPotentially Unwanted Program
Software that cannot definitively be classed as malicious, but may not have been chosen by or wanted by the user. - 169QAQuality Assurance
Policies, procedures, and tools designed to ensure defect-free development and delivery. - 170QoSQuality of Service
Systems that differentiate data passing over the network that can reserve bandwidth for particular applications. A system that cannot guarantee a level of available bandwidth is often described as Class of Service (CoS). Also known as CoS. - 171RARecovery Agent
In PKI, an account or combination of accounts that can copy a cryptographic key from backup or escrow and restore it to a subject host or user. - 172RARegistration Authority
In PKI, an authority that accepts requests for digital certificates and authenticates the entities making those requests. - 173RADIUSRemote Authentication Dial-in User Service
A standard protocol used to manage remote and wireless authentication infrastructures. - 174RAIDRedundant Array of Independent Disks
Specifications that support redundancy and fault tolerance for different configurations of multiple-device storage systems. rainbow table Tool for speeding up attacks against Windows passwords by precomputing possible hashes. - 175RAID 0Striping
Data is distributed across all the disks within the logical drive. Improves performance and uses all storage capacity but does not provide redundancy. Requires at least 2 disks - 176RAID 1Mirroring
Consists of 2 drives, each of which contains identical data. Provides excellent read/write speeds comparable to a single drive. If one drive fails, data remains available with little performance impact. Rebuild process involves simply copying data from live disk to replacement. - 177RAID 10Mirroring/Striping
Takes multiple RAID 1 mirror sets (2+) and stripes them together to increase speed and provide redundancy. Can be recovered if only one drive in each volume fails, but is unrecoverable if two drives in the same volume fail. Requires at least 4 drives - 178RAID 5Striping with Distributed Parity
Requires minimum of 3 drives to implement. Provides relative efficiency and reliable redundancy with smaller sized disks up to a single disk failure. If one disk fails, performance will suffer as the controller has to read the parity block and perform calculations to determine the missing piece of data. - 179RAID 6Striping with Dual Parity
Parity is distributed across all disks allowing for up to 2 disk failures (since 2 disks are used for parity rather than 1 in RAID 5). When operating in a degraded mode, performance is significantly impacted although caching controllers can help minimize the impact. Requires at least 5 disks - 180RATRemote Access Trojan
Malware that creates a backdoor remote administration channel to allow a threat actor to access and control the infected host. - 181RBACRole-Based Access Control
An access control model where resources are protected by ACLs that are managed by administrators and that provide user permissions based on job functions. - 182RCSRich Communication Services
Platform-independent advanced messaging functionality designed to replace SMS and MMS. - 183RFCRequest for Comment
Documents produced by the Internet Engineering Task Force (ietf.org) that describe the technical specifications and organizational notes for the internet. They describe the technical foundations of the internet, such as addressing, routing, and transport technologies and specify protocols that are used to deliver services over the internet. - 184RPORecovery Point Objective
The longest period of time that an organization can tolerate lost data being unrecoverable - 185RSARivest Shamir Adelman
Named for its designers, Ronald Rivest, Adi Shamir, and Len Adelman, the first successful algorithm for public key encryption with a variable key length and block size. - 186RTBHRemote Triggered Black Hole
Using a trigger device to send a BGP route update that instructs routers to drop traffic that is suspected of attempting DDoS. - 187RTORecovery Time Objective
The length of time it takes after an event to resume normal business operations and activities. - 188RTOSReal-Time Operating System
A type of OS that prioritizes deterministic execution of operations to ensure consistent response for time-critical tasks. - 189RTPReal-Time Transport Protocol
Opens a data stream for video and voice applications over UDP. The data is packetized and tagged with control information (sequence numbering and time-stamping). - 190S/MIMESecure/Multipurpose Internet Mail Extensions
An email encryption standard that adds digital signatures and public key cryptography to traditional MIME communications. - 191SAESimultaneous Authentication of Equals
Personal authentication mechanism for Wi-Fi networks introduced with WPA3 to address vulnerabilities in the WPA-PSK method. - 192SaaSSoftware as a Service
A computing method that uses the cloud to provide application services to users. - 193SAMLSecurity Assertion Markup Language
An XML-based data format used to exchange authentication information between a client and a service. - 194SANSubject Alternative Name
Field in a digital certificate allowing a host to be identified by multiple host names/subdomains. - 195SASSerial Attached SCSI
Developed from parallel SCSI, SAS represents the highest performing hard disk interface available. - 196SCADASupervisory Control and Data Acquisition
A type of industrial control system that manages large-scale, multiple-site devices and equipment spread over geographically large areas. - 197SCAPSecurity Content Automation Protocol
A NIST framework that outlines various accepted practices for automating vulnerability scanning. - 198SDKSoftware Development Kit
Coding resources provided by a vendor to assist with development projects that use their platform or API. - 199SDNSoftware Defined Networking
APIs and compatible hardware/virtual appliances allowing for programmable network appliances and systems. - 200SDVSoftware-Defined Visibility
APIs for reporting configuration and state data for automated monitoring and alerting.
Informationen
- Beschreibung
- comptia Security+ Karteikarten am Security+, erstellt von Jake Baker am 08/05/2023.
- Erstellt von
- Jake Baker
- Aufrufe
- 0
- Bewertung