GoConqr has a new look! Let us know what you think.

Sign up free

Flashcards

Security+

Jake Baker Security+ comptia English 200 cards

Cards in this deck (200)

  1. 1AAAAuthentication, Authorization, Accounting
    Core security concept where a centralized platform verifies subject identification, ensures subject is assigned relevant permissions, and then logs these actions to create an audit trail.
  2. 2ABACAttribute-Based Access Control
    Access control technique that evaluates a set of attributes that each subject possesses to determine if access should be granted.
  3. 3ACLAccess Control List
    Collection of access control entries (ACEs) that determines which subjects (user accounts, host IP addresses, etc.) are allowed or denied access to the object and the privileges given (read only, read/write, etc.)
  4. 4AESAdvanced Encryption Standard
    A symmetric 128-, 192-, or 256-bit block cipher based on the Rijndael algorithm developed by Belgian cryptographers Joan Daemen and Vincent Rijmen and adopted by the US Govt as its encryption standard to replace DES
  5. 5AHAuthentication Header
    IPSec Protocol that provides authentication for the origin of transmitted data as well as integrity and protection against replay attacks.
  6. 6AISAutomated Indicator Sharing
    Threat intelligence data feed operated by the DHS.
  7. 7ALEAnnual Loss Expectancy
    The total cost of a risk to an organization on an annual basis. This is determined by multiplying the SLE by the annual rate of occurrence (ARO).
  8. 8APAccess Point
    A device that provides a connection between wireless devices and can connect to wired networks. Also known as wireless access point or WAP.
  9. 9APIApplication Programming Interface
    A library of programming utilities used, for example, to enable software developers to access functions of the TCP/IP network stack under a particular operating system.
  10. 10APTAdvanced Persistent Threat
    An attacker's ability to obtain, maintain, and diversify access to network systems using exploits and malware.
  11. 11AROAnnual Rate of Occurrence
    In risk calculation, an expression of the probability/likelihood of a risk as the number of times per year a particular loss is expected to occur.
  12. 12ATT&CKAdversarial Tactics, Techniques, and Common Knowledge
    A knowledge base maintained by the MITRE Corporation for listing and explaining specific adversary tactics, techniques, and procedures.
  13. 13BASBuilding Automation System
    Components and protocols that facilitate the centralized configuration and monitoring of mechanical and electrical systems within offices and data centers.
  14. 14BIABusiness Impact Analysis
    A systematic activity that identifies organizational risks and determines their effect on ongoing, mission critical operations.
  15. 15BPABusiness Partnership Agreement
    Agreement by two companies to work together closely, such as the partner agreements that large IT companies set up with resellers and solution providers.
  16. 16BPDU GuardBridge Protocol Data Unit Guard
    Switch port security feature that disables the port if it receives BPDU notifications related to spanning tree. This is configured on access ports where there any BPDU frames are likely to be malicious.
  17. 17BYODBring Your Own Device
    Security framework and tools to facilitate use of personally-owned devices to access corporate networks and data.
  18. 18C&CCommand and Control (C2)
    An infrastructure of hosts and services with which attackers direct, distribute, and control malware over botnets. Also known as C2
  19. 19CACertificate Authority
    A server that guarantees subject identities by issuing signed digital certificate wrappers for their public keys.
  20. 20CACCommon Access Card
    A smart card that provides certificate-based authentication and supports two-factor authentication. A CAC is produced for Department of Defense employees and contractors in response to a Homeland Security Directive.
  21. 21CAN BusController Area Network Bus
    A serial network designed to allow communications between embedded programmable logic controllers.
  22. 22CAPTCHACompletely Automated Public Turing Test to Tell Computers and Humans Apart
    An image of text characters or audio of some speech that is difficult for a computer to interpret. CAPTCHAs are used for purposes such as preventing bots from creating accounts on web forums and social media sites to spam them
  23. 23CASBCloud Access Security Broker
    Enterprise management software designed to mediate access to cloud services by users across all types of devices
  24. 24CBCCipher Block Chaining
    An encryption mode of operation where an exclusive or (XOR) is applied to the first plaintext block
  25. 25CCMPCounter Mode with Cipher Block Chaining Message Authentication Code Protocol
    An encryption protocol used for wireless LANs that addresses the vulnerabilities of the WEP protocol
  26. 26CECryptographic Erase
    A method of sanitizing a self-encrypting drive by erasing the media encryption key.
  27. 27CERCrossover Error Rate
    Describes the overall accuracy rate of a biometric system. As sensitivity of the system increases, FRRs will rise and FARs will drop; conversely, if sensitivity is decreased, FRRs will drop and FARs will increase.
  28. 28CHAPChallenge Handshake Authentication Protocol
    Authentication scheme developed for dial-up networks that uses an encrypted three-way handshake to authenticate the client to the server. The challenge-response is repeated throughout the connection (though transparently to the user) to guard against replay attacks.
  29. 29CIAConfidentiality, Integrity, Availability
    The three principles of security control and management. Also known as the information security triad. or AIC triad.
  30. 30CISCenter for Internet Security
    A not-for-profit organization (founded partly by SANS). It publishes the well-known "Top 20 Critical Security Controls" (or system design recommendations).
  31. 31CNCommon Name
    An X500 attribute expressing a host or user name, also used as the subject identifier for a digital certificate.
  32. 32COBOCorporate Owned, Business Only
    Enterprise mobile device provisioning model where the device is the property of the organization and personal use is prohibited.
  33. 33CSMContinuous Security Monitoring
    The technique of constantly evaluating an environment for changes so that new risks may be more quickly detected and business operations improved upon. Also known as continuous security monitoring or CSM.
  34. 34COPECorporate Owned, Personally Enabled
    Enterprise mobile device provisioning model where the device remains the property of the organization, but certain personal use, such as private email, social networking, and web browsing, is permitted.
  35. 35CTMCounter Mode
    An encryption mode of operation where a numerical counter value is used to create a constantly changing IV. Also referred to as CTM (counter mode) and CM (counter mode).
  36. 36CRLCertificate Revocation List
    List of certificates revoked before their expiration date.
  37. 37CSPCloud Service Provider
    A vendor offering public cloud service models, such as PaaS, IaaS, or SaaS.
  38. 38CSRCertificate Signing Request
    A Base64 ASCII file that a subject sends to a CA to get a certificate.
  39. 39CTICyber Threat Intelligence
    The process of investigating, collecting, analyzing, and disseminating information about emerging threats and threat sources. Also known as threat intelligence.
  40. 40CVECommon Vulnerabilities and Exposures
    Scheme for identifying vulnerabilities developed by MITRE and adopted by NIST
  41. 41CVSSCommon Vulnerability Scoring System
    A risk management approach to quantifying vulnerability data and then taking into account the degree of risk to different types of systems or information.
  42. 42CYODChoose Your Own Device
    Enterprise mobile device provisioning model where employees are offered a selection of corporate devices for work and, optionally, private use.
  43. 43DACDiscretionary Access Control
    Access control model where each resource is protected by an Access Control List (ACL) managed by the resource's owner (or owners).
  44. 44DDoSDistributed Denial of Service
    An attack that uses multiple compromised hosts (a botnet) to overwhelm a service with request or response traffic.
  45. 45DERDistinguished Encoding Rules
    Binary format used to structure the info in a digital certificate.
  46. 46DHDiffie-Hellman
    Cryptographic technique providing secure key exchange
  47. 47DLPData Loss (Leak) Prevention
    A software solution that detects and prevents sensitive information from being stored on unauthorized systems or transmitted over unauthorized networks
  48. 48DMZDemilitarized Zone
    A segment isolated from the rest of a private network by one or more firewalls that accepts connections from the Internet over designated ports.
  49. 49DNATDestination Network Address Translation
    NAT service where private internal addresses are mapped to one or more public addresses to facilitate Internet connectivity for hosts on a local network via a router.
  50. 50DNS HijackingAn attack in which an attacker modifies a computer's DNS configurations to point to a malicious DNS server.
  51. 51DNS PoisoningA network-based attack where an attacker exploits the traditionally open nature of the DNS system to redirect a domain name to an IP address of the attacker's choosing.
  52. 52DNSSECDomain Name System Security Extensions
    A security protocol that provides authentication of DNS data and upholds DNS data integrity.
  53. 53DPOData Privacy Officer
    Institutional data governance role with responsibility for compliant collection and processing of personal and sensitive data.
  54. 54DRPDisaster Recovery Plan
    A documented and resourced plan showing actions and responsibilities to be used in response to critical incidents
  55. 55DSADigital Signature Algorithm
    public key encryption standard used for digital signatures that provides authentication and integrity verification for messages.
  56. 56EAPExtensible Authentication Protocol
    Framework for negotiating authentication methods that enables systems to use hardware-based identifiers, such as fingerprint scanners or smart card readers, for authentication
  57. 57EAP-FASTEAP Flexible Authentication via Secure Tunneling
    An EAP method that is expected to address the shortcomings of LEAP
  58. 58EAPoLExtensible Authentication Protocol over LAN
    A port-based network access control (PNAC) mechanism that allows the use of EAP authentication when a host connects to an Ethernet switch.
  59. 59EAP-TLSEAP Transport Layer Security
    An EAP method that requires server-side and client-side certificates for authentication using SSL/ TLS.
  60. 60EAP-TTLSEAP Tunneled Transport Layer Security
    An EAP method that enables a client and server to establish a secure connection without mandating a client-side certificate.
  61. 61ECCElliptical Curve Cryptography
    An asymmetric encryption algorithm that leverages the algebraic structures of elliptic curves over finite fields to derive public/private key pairs
  62. 62EDREndpoint Detection and Response
    A software agent that collects system data and logs for analysis by a monitoring system to provide early detection of threats.
  63. 63EFExposure Factor
    In risk calculation, the percentage of an asset's value that would be lost during a security incident or disaster scenario.
  64. 64EOLEnd of Life
    Product life cycle phase where sales are discontinued and support options reduced over time.
  65. 65EOSLEnd of Service Life
    Product life cycle phase where support is no longer available from the vendor.
  66. 66EPPEndpoint Protection Platform
    A software agent and monitoring system that performs multiple security tasks.
  67. 67ERMEnterprise Risk Management
    The comprehensive process of evaluating, measuring, and mitigating the many risks that pervade an organization.
  68. 68ESPEncapsulating Security Protocol
    IPSec sub-protocol that enables encryption and authentication of the header and payload of a data packet
  69. 69FARFalse Acceptance Rate
    Biometric assessment metric that measures the number of unauthorized users who are mistakenly allowed access.
  70. 70FCFibre Channel
    High-speed network communications protocol used to implement SANs
  71. 71FDEFull Disk Encryption
    Encryption of all data on a disk (including system files, temporary files, and the pagefile) can be accomplished via a supported OS, third-party software, or at the controller level by the disk device itself.
  72. 72FIMFile Integrity Monitoring
    A type of software that reviews system files to ensure that they have not been tampered with
  73. 73FPGAField Programmable Gate Array
    A processor that can be programmed to perform a specific function by a customer rather than at the time of manufacture.
  74. 74FRRFalse Rejection Rate
    Biometric assessment metric that measures the number of valid subjects who are denied access.
  75. 75FTKForensic Tool Kit
    Commercial digital forensics investigation management and utilities suite, published by AccessData.
  76. 76FTPSFile Transfer Protocol with TLS
    Type of FTP using TLS for confidentiality
  77. 77GCMGalois/Counter Mode
    A mode of block chained encryption that provides message authenticity for each block.
  78. 78GDPRGeneral Data Protection Regulation
    Provisions and requirements protecting the personal data of European Union (EU) citizens. Transfers of personal data outside the EU Single Market are restricted unless protected by like-for-like regulations, such as the US's Privacy Shield requirements.
  79. 79GPOGroup Policy Object
    On a Windows domain, a way to deploy per-user and per-computer settings such as password policy, account restrictions, firewall status, and so on.
  80. 80HAHigh Availability
    The property that defines how closely systems approach the goal of providing data availability 100 percent of the time while maintaining a high level of system performance.
  81. 81HMACHash-Based Message Authentication Code
    A method used to verify both the integrity and authenticity of a message by combining a cryptographic hash of the message with a secret key.
  82. 82HOTPHMAC-Based One-Time Password
    An algorithm that generates a one-time password using a hash-based authentication code to verify the authenticity of the message
  83. 83HSMHardware Security Module
    An appliance for generating and storing cryptographic keys. This sort of solution may be less susceptible to tampering and insider threats than software-based storage
  84. 84HTML5 VPNHTML5 Virtual Private Network
    Using features of HTML5 to implement remote desktop/VPN connections via browser software (clientless).
  85. 85IaaSInfrastructure as a Service
    A computing method that uses the cloud to provide any or all infrastructure needs
  86. 86IaCInfrastructure as Code
    A provisioning architecture in which deployment of resources is performed by scripted automation and orchestration.
  87. 87IAMIdentity and Access Management
    A security process that provides identification, authentication, and authorization mechanisms for users, computers, and other entities to work with organizational assets like networks, operating systems, and applications.
  88. 88ICSIndustrial Control System
    A network managing embedded devices (computer systems that are designed to perform a specific, dedicated function).
  89. 89IdPIdentity Provider
    In a federated network, the service that holds the user account and performs authentication
  90. 90IDSIntrusion Detection System
    A passive software and/or hardware system that scans, audits, and monitors the security infrastructure for signs of attacks in progress.
  91. 91IEEE 802.1XA standard for encapsulating EAP communications over a LAN (EAPoL) to implement port-based authentication.
  92. 92IKEInternet Key Exchange
    Framework for creating a Security Association (SA) used with IPSec. An SA establishes that two hosts trust one another (authenticate) and agree secure protocols and cipher suites to use to exchange data.
  93. 93IoCIndicator of Compromise
    A sign that an asset or network has been attacked or is currently under attack.
  94. 94IPAMIP Address Management
    Software consolidating management of multiple DHCP and DNS services to provide oversight into IP address allocation across an enterprise network.
  95. 95IPFIXIP Flow Information Export
    Standards-based version of the Netflow framework
  96. 96IPSIntrusion Prevention System
    An IDS that actively blocks attacks in addition to detecting them.
  97. 97IPSecInternet Protocol Security
    A set of open, non-proprietary standards that are used to secure data through authentication and encryption as the data travels across the network or the Internet.
  98. 98IRPIncident Response Plan
    Specific procedures that must be performed if a certain type of event is detected or reported.
  99. 99ISAInterconnection Security Agreement
    Any federal agency interconnecting its IT system to a third-party must create an ISA to govern the relationship. An ISA sets out a security risk awareness process and commit the agency and supplier to implementing security controls.
  100. 100ISACInformation Sharing and Analysis Center
    Not-for-profit group set up to share sector-specific threat intelligence and security best practices amongst its members.
  101. 101ISO/IEC 27KInternational Organization for Standardization 27000 Series
    A comprehensive set of standards for information security, including best practices for security and risk management, compliance, and technical implementation.
  102. 102ISO/IEC 31KInternational Organization for Standardization 31000 Series
    A comprehensive set of standards for enterprise risk management.
  103. 103IV AttackInitialization Vector Attack
    A wireless attack where the attacker is able to predict or control the IV of an encryption process, thus giving the attacker access to view the encrypted data that is supposed to be hidden from everyone else except the user or network.
  104. 104L2TPLayer 2 Tunneling Protocol
    VPN Protocol for tunneling PPP sessions across a variety of network protocols such as IP, FrameRelay, or ATM.
  105. 105LDAPLightweight Directory Access Protocol
    A network protocol used to access network directory databases, which store information about authorized users and their privileges, as well as other organizational information.
  106. 106LDAPSLightweight Directory Access Protocol Secure
    Method of implementing LDAP using SSL/TLS encryption
  107. 107LEAPLightweight Extensible Authentication Protocol
    Cisco's proprietary EAP implementation
  108. 108LLRLessons Learned Report
    An analysis of events that can provide insight into how to improve response processes in the future. Also known as after action report or AAR.
  109. 109MaaSMonitoring as a Service
    Cloud service providing ongoing security and availability monitoring of on-premises and/or cloud-based hosts and services.
  110. 110MACMandatory Access Control
    Access control model where resources are protected by inflexible, system defined rules. Resources (objects) and users (subjects) are allocated a clearance level (or label).
  111. 111MAC (Authentication)Message Authentication Code
    Proving the integrity and authenticity of a message by combining its hash with a shared secret
  112. 112MAMMobile Application Management
    Enterprise management function that enables control over apps and storage for mobile devices and other endpoints.
  113. 113MD5Message Digest Algorithm v5
    A cryptographic hash function producing a 128-bit output.
  114. 114MDMMobile Device Management
    The process and supporting technologies for tracking, controlling, and securing the organization's mobile infrastructure.
  115. 115MEFMission Essential Function
    A business or organizational activity that is too critical to be deferred for anything more than a few hours, if at all.
  116. 116MFAMultifactor Authentication
    An authentication scheme that requires the user to present at least two different factors as credentials, from something you know, something you have, something you are, something you do, and somewhere you are. Specifying two factors is known as 2FA.
  117. 117MitBMan-in-the-Browser
    An attack when the web browser is compromised by installing malicious plug-ins or scripts, or intercepting API calls between the browser process and DLLs.
  118. 118MitMMan-in-the-Middle
    A form of eavesdropping where the attacker makes an independent connection between two victims and steals information to use fraudulently.
  119. 119MMSMultimedia Messaging Service
    Extension to SMS allowing digital data (picture, video, or audio) to be sent over a cellular data connection.
  120. 120MoUMemorandum of Understanding
    Usually a preliminary or exploratory agreement to express an intent to work together that is not legally binding and does not involve the exchange of money.
  121. 121MPLSMultiprotocol Label Switching
    Developed by Cisco from ATM as a means of providing traffic engineering (congestion control), Class of Service, and Quality of Service within a packet switched, rather than circuit switched, network.
  122. 122MSAMeasurement Systems Analysis
    Evaluates the data collection and statistical methods used by a quality management process to ensure they are robust.
  123. 123MSSPManaged Security Service Provider
    Third-party provision of security configuration and monitoring as an outsourced service.
  124. 124MTBFMean Time Before Failure
    The rating on a device or component that predicts the expected time between failures.
  125. 125MTDMaximum Tolerable Downtime
    The longest period of time a business can be inoperable without causing irrevocable business failure.
  126. 126MTTFMean Time to Failure
    The average time a device or component is expected to be in operation.
  127. 127MTTRMean Time to Repair/Replace/Recover
    The average time taken for a device or component to be repaired, replaced, or otherwise recover from a failure.
  128. 128NACNetwork Access Control
    A general term for the collected protocols, policies, and hardware that authenticate and authorize access to a network at the device level.
  129. 129NATNetwork Address Translation
    A routing mechanism that conceals internal addressing schemes from the public Internet by translating between a single public address on the external side of a router and private, non-routable addresses internally.
  130. 130NDANon-Disclosure Agreement
    An agreement that stipulates that entities will not share confidential information, knowledge, or materials with unauthorized third parties.
  131. 131NFCNear Field Communication
    A standard for peer-to-peer (2-way) radio communications over very short (around 4") distances, facilitating contactless payment and similar technologies. NFC is based on RFID.
  132. 132NFVNetwork Functions Virtualization
    Provisioning virtual network appliances, such as switches, routers, and firewalls, via VMs and containers.
  133. 133NGFWNext-Generation Firewall
    Advances in firewall technology, from app awareness, user-based filtering, and intrusion prevention to cloud inspection. Also known as layer 7 firewall
  134. 134NTLM AuthenticationNT LAN Manager Authentication
    A challenge-response authentication protocol created by Microsoft for use in its products.
  135. 135NVDNational Vulnerability Database
    US govt repository of standards-based vulnerability management data represented using the Security Content Automation Protocol. Data enables automation of vulnerability management, security measurement, and compliance.
  136. 136OATHInitiative for Open Authentication
    An industry body comprising the main PKI providers, such as Verisign and Entrust, that was established with the aim of developing an open, strong authentication framework
  137. 137OAuthOpen Authentication
    Standard for federated identity management, allowing resource servers or consumer sites to work with user accounts created and managed on a separate identity provider.
  138. 138OCSPOnline Certificate Status Protocol
    Allows clients to request the status of a digital certificate, to check whether it is revoked.
  139. 139OIDCOpenID Connect
    An authentication layer that sits on top of the OAuth 2.0 authorization protocol.
  140. 140OIDObject Identifier
    Numeric schema used for attributes of digital certificates.
  141. 141OOBOut-of-Band Management
    Accessing the administrative interface of a network appliance using a separate network from the usual data network. This could use a separate VLAN or a different kind of link, such as a dial-up modem.
  142. 142OSINTOpen-Source Intelligence
    Publicly available information plus the tools used to aggregate and search it.
  143. 143OTOperational Technology
    A communications network designed to implement an industrial control system rather than data networking.
  144. 144OTAOver-the-Air
    A firmware update delivered on a cellular data connection. output encoding Coding methods to sanitize output created from user input.
  145. 145OWASPOpen Web Application Security Project
    A charity and community publishing a number of secure application development resources.
  146. 146P12Public Key Cryptography Standard #12
    Format that allows a private key to be exported along with its digital certificate.
  147. 147P7BFile format for transmitting a chain of digital certificates, using PKCS#7
  148. 148PaaSPlatform as a Service
    Computing method that uses the cloud to provide any platform-type services for applications.
  149. 149PAMPluggable Authentication Module
    Framework for implementing authentication providers in Linux.
  150. 150PAM (Access Control)Privileged Access Manager
    Software for controlling privileged access to applications and processes.
  151. 151PATPort Address Translation
    Maps private host IP addresses onto a single public IP address. Each host is tracked by assigning it a random high TCP port for communications. Also known as network address port translation (NAPT) or NAT overloading.
  152. 152PCI DSSPayment Card Industry Data Security Standard
    Information security standard for organizations that process credit or bank card payments.
  153. 153PDUPower Distribution Unit
    Advanced strip socket that provides filtered output voltage. A managed unit supports remote administration.
  154. 154PEAPProtected Extensible Authentication Protocol
    EAP implementation that uses a server-side certificate to create a secure tunnel for user authentication, referred to as the inner method.
  155. 155PEMPrivacy-Enhanced Mail
    Base64 encoding scheme used to store certificate and key data as ASCII text.
  156. 156PFSPerfect Forward Secrecy
    A characteristic of transport encryption that ensures if a key is compromised the compromise will only affect a single session and not facilitate recovery of plaintext data from other sessions.
  157. 157PFXPersonal Information Exchange
    Windows file format for storing a private key and certificate data. The file can be password-protected.
  158. 158PHIPersonal/Protected Health Information
    Information that identifies someone as the subject of medical and insurance records, plus associated hospital and laboratory test results.
  159. 159PIIPersonally Identifiable Information
    Data that can be used to identify or contact an individual (or in the case of identity theft, to impersonate them).
  160. 160PIVPersonal Identity Verification Card
    A smart card that meets the standards for FIPS 201, in that it is resistant to tampering and provides quick electronic authentication of the card's owner.
  161. 161PKCSPublic Key Cryptography Standards
    Series of standards defining the use of certificate authorities and digital certificates.
  162. 162PKIPublic Key Infrastructure
    Framework of certificate authorities, digital certificates, software, services, and other cryptographic components deployed for the purpose of validating subject identities.
  163. 163PNACPort-Based Network Access Control
    A switch (or router) that performs some sort of authentication of the attached device before activating the port.
  164. 164PPPPoint-to-Point Protocol
    Dial-up protocol working at layer 2 (Data Link) used to connect devices remotely to networks.
  165. 165PPTPPoint-to-Point Tunneling Protocol
    Developed by Cisco and Microsoft to support VPNs over PPP and TCP/IP. PPTP is highly vulnerable to password cracking attacks and considered obsolete.
  166. 166PSKPre-Shared Key
    Passphrase-based mechanism to allow group authentication to a wireless network. The passphrase is used to derive an encryption key.
  167. 167PtHPass the Hash
    A network-based attack where the attacker steals hashed user credentials and uses them as-is to try to authenticate to the same network the hashed credentials originated on.
  168. 168PUPPotentially Unwanted Program
    Software that cannot definitively be classed as malicious, but may not have been chosen by or wanted by the user.
  169. 169QAQuality Assurance
    Policies, procedures, and tools designed to ensure defect-free development and delivery.
  170. 170QoSQuality of Service
    Systems that differentiate data passing over the network that can reserve bandwidth for particular applications. A system that cannot guarantee a level of available bandwidth is often described as Class of Service (CoS). Also known as CoS.
  171. 171RARecovery Agent
    In PKI, an account or combination of accounts that can copy a cryptographic key from backup or escrow and restore it to a subject host or user.
  172. 172RARegistration Authority
    In PKI, an authority that accepts requests for digital certificates and authenticates the entities making those requests.
  173. 173RADIUSRemote Authentication Dial-in User Service
    A standard protocol used to manage remote and wireless authentication infrastructures.
  174. 174RAIDRedundant Array of Independent Disks
    Specifications that support redundancy and fault tolerance for different configurations of multiple-device storage systems. rainbow table Tool for speeding up attacks against Windows passwords by precomputing possible hashes.
  175. 175RAID 0Striping
    Data is distributed across all the disks within the logical drive. Improves performance and uses all storage capacity but does not provide redundancy. Requires at least 2 disks
  176. 176RAID 1Mirroring
    Consists of 2 drives, each of which contains identical data. Provides excellent read/write speeds comparable to a single drive. If one drive fails, data remains available with little performance impact. Rebuild process involves simply copying data from live disk to replacement.
  177. 177RAID 10Mirroring/Striping
    Takes multiple RAID 1 mirror sets (2+) and stripes them together to increase speed and provide redundancy. Can be recovered if only one drive in each volume fails, but is unrecoverable if two drives in the same volume fail. Requires at least 4 drives
  178. 178RAID 5Striping with Distributed Parity
    Requires minimum of 3 drives to implement. Provides relative efficiency and reliable redundancy with smaller sized disks up to a single disk failure. If one disk fails, performance will suffer as the controller has to read the parity block and perform calculations to determine the missing piece of data.
  179. 179RAID 6Striping with Dual Parity
    Parity is distributed across all disks allowing for up to 2 disk failures (since 2 disks are used for parity rather than 1 in RAID 5). When operating in a degraded mode, performance is significantly impacted although caching controllers can help minimize the impact. Requires at least 5 disks
  180. 180RATRemote Access Trojan
    Malware that creates a backdoor remote administration channel to allow a threat actor to access and control the infected host.
  181. 181RBACRole-Based Access Control
    An access control model where resources are protected by ACLs that are managed by administrators and that provide user permissions based on job functions.
  182. 182RCSRich Communication Services
    Platform-independent advanced messaging functionality designed to replace SMS and MMS.
  183. 183RFCRequest for Comment
    Documents produced by the Internet Engineering Task Force (ietf.org) that describe the technical specifications and organizational notes for the internet. They describe the technical foundations of the internet, such as addressing, routing, and transport technologies and specify protocols that are used to deliver services over the internet.
  184. 184RPORecovery Point Objective
    The longest period of time that an organization can tolerate lost data being unrecoverable
  185. 185RSARivest Shamir Adelman
    Named for its designers, Ronald Rivest, Adi Shamir, and Len Adelman, the first successful algorithm for public key encryption with a variable key length and block size.
  186. 186RTBHRemote Triggered Black Hole
    Using a trigger device to send a BGP route update that instructs routers to drop traffic that is suspected of attempting DDoS.
  187. 187RTORecovery Time Objective
    The length of time it takes after an event to resume normal business operations and activities.
  188. 188RTOSReal-Time Operating System
    A type of OS that prioritizes deterministic execution of operations to ensure consistent response for time-critical tasks.
  189. 189RTPReal-Time Transport Protocol
    Opens a data stream for video and voice applications over UDP. The data is packetized and tagged with control information (sequence numbering and time-stamping).
  190. 190S/MIMESecure/Multipurpose Internet Mail Extensions
    An email encryption standard that adds digital signatures and public key cryptography to traditional MIME communications.
  191. 191SAESimultaneous Authentication of Equals
    Personal authentication mechanism for Wi-Fi networks introduced with WPA3 to address vulnerabilities in the WPA-PSK method.
  192. 192SaaSSoftware as a Service
    A computing method that uses the cloud to provide application services to users.
  193. 193SAMLSecurity Assertion Markup Language
    An XML-based data format used to exchange authentication information between a client and a service.
  194. 194SANSubject Alternative Name
    Field in a digital certificate allowing a host to be identified by multiple host names/subdomains.
  195. 195SASSerial Attached SCSI
    Developed from parallel SCSI, SAS represents the highest performing hard disk interface available.
  196. 196SCADASupervisory Control and Data Acquisition
    A type of industrial control system that manages large-scale, multiple-site devices and equipment spread over geographically large areas.
  197. 197SCAPSecurity Content Automation Protocol
    A NIST framework that outlines various accepted practices for automating vulnerability scanning.
  198. 198SDKSoftware Development Kit
    Coding resources provided by a vendor to assist with development projects that use their platform or API.
  199. 199SDNSoftware Defined Networking
    APIs and compatible hardware/virtual appliances allowing for programmable network appliances and systems.
  200. 200SDVSoftware-Defined Visibility
    APIs for reporting configuration and state data for automated monitoring and alerting.

Information

Description
comptia Security+ Flashcards on Security+, created by Jake Baker on 08/05/2023.
Created by
Jake Baker
Views
0
Rating

Feedback

What is it about?

What do you think of the new look?

How do you like it?