Comptia Security+ 2nd
| Term/Front | Definition/Back |
|---|---|
| 1 What does BYOD stand for? | Bring Your Own Device |
| 2 What is BYOD? | A policy that allows employees to use personal devices for work. |
| 3 What does MDM stand for? | Mobile Device Management |
| 4 What is the purpose of MDM? | To manage and secure mobile devices remotely. |
| 5 What is the purpose of SSO? | To allow one login for multiple applications. |
| 6 What is RBAC? | Assigning permissions based on a user's job role. |
| 7 What does DAC stand for? | Discretionary Access Control |
| 8 What does MAC stand for in access control? | Mandatory Access Control |
| 9 What is the difference between DAC and MAC? | DAC allows owners to set permissions while MAC uses centrally controlled policies. |
| 10 What does RTO stand for? | Recovery Time Objective |
| 11 What does RPO stand for? | Recovery Point Objective |
| 12 What is RTO? | The maximum acceptable time to restore operations after an outage. |
| 13 What is RPO? | The maximum acceptable amount of data loss measured in time. |
| 14 What is business continuity planning? | Preparing to keep business operations running during disruptions. |
| 15 What is disaster recovery? | Restoring systems and operations after a major event. |
| 16 What is an acceptable use policy? | Rules defining proper use of company systems and resources. |
| 17 What is XSS? | An attack that injects malicious scripts into web pages viewed by users. |
| 18 What does SQL stand for in SQL injection? | Structured Query Language |
| 19 What is SQL injection? | An attack that inserts malicious database commands into an application. |
| 20 What is CSRF? | An attack that tricks a user into performing unwanted actions on a website. |
| 21 What does DDoS stand for? | Distributed Denial of Service |
| 22 What is a DDoS attack? | An attack using many systems to overwhelm a target with traffic. |
| 23 What is privilege escalation? | Gaining higher access rights than originally authorized. |
| 24 What is credential stuffing? | Using stolen usernames and passwords to access accounts. |
| 25 What is password spraying? | Trying a common password against many accounts. |
| 26 What is a rainbow table? | A table of precomputed hash values used to crack passwords. |
| 27 What is salting in password security? | Adding random data to passwords before hashing. |
| 28 What is obfuscation? | Making data or code difficult to understand or reverse engineer. |
| 29 What is data masking? | Hiding sensitive information while preserving its format. |
| 30 What is exfiltration? | Unauthorized transfer of data out of a system. |
| 31 What is reconnaissance in cybersecurity? | Gathering information about a target before an attack. |
| 32 What is enumeration? | Collecting detailed information about systems and services. |
| 33 What is a vulnerability assessment? | Identifying and prioritizing security weaknesses. |
| 34 What is the MITRE ATT&CK framework? | A knowledge base of attacker tactics and techniques. |
| 35 What does IOC stand for? | Indicator of Compromise |
| 36 What is an Indicator of Compromise? | Evidence that suggests a system may have been breached. |
| 37 What does TTP stand for in cybersecurity? | Tactics, Techniques, and Procedures |
| 38 What is a tactic in the MITRE ATT&CK framework? | The attacker's goal or objective. |
| 39 What is a technique in the MITRE ATT&CK framework? | The method used to achieve a tactic. |
| 40 What is a procedure in cybersecurity? | The specific way an attacker carries out a technique. |
| 41 What does CVE stand for? | Common Vulnerabilities and Exposures |
| 42 What does CVSS stand for? | Common Vulnerability Scoring System |
| 43 What is the purpose of CVSS? | To measure the severity of vulnerabilities. |
| 44 What does CWE stand for? | Common Weakness Enumeration |
| 45 What is a security baseline? | A minimum set of security standards for systems. |
| 46 What is a benchmark in security? | A recommended configuration standard for systems. |
| 47 What is a whitelist? | A list of approved items that are allowed. |
| 48 What is a blacklist? | A list of blocked items that are denied. |
| 49 What is application allowlisting? | Allowing only approved applications to run. |
| 50 What is sandboxing? | Running programs in an isolated environment for safety. |
| 51 What is secure boot? | A feature that prevents unauthorized software from loading during startup. |
| 52 What does EOS stand for? | End of Support |
| 53 What is End of Life (EOL)? | The point when a product is no longer sold or developed. |
| 54 What is End of Support (EOS)? | The point when a product no longer receives updates or fixes. |
| 55 What is patching? | Installing updates to fix bugs and security issues. |
| 56 What is an exploit? | Code or actions that take advantage of a vulnerability. |
| 57 What is a security control? | A safeguard used to reduce risk. |
| 58 What are administrative controls? | Policies, procedures, and training that improve security. |
| 59 What are technical controls? | Hardware and software measures that protect systems. |
| 60 What are physical controls? | Security measures that protect physical assets and locations. |
| 61 What is the purpose of security awareness training? | To teach users how to recognize and avoid threats. |
| 62 What is phishing awareness training? | Training that helps users identify phishing attempts. |
| 63 What is the purpose of a security audit? | To evaluate compliance with policies and standards. |
| 64 What is compliance? | Following laws, regulations, and organizational policies. |
| 65 What is governance in cybersecurity? | The process of directing and managing security efforts. |
| 66 What is due diligence? | Investigating and assessing risks before making decisions. |
| 67 What is due care? | Taking reasonable steps to protect assets and reduce risks. |
| 68 What is risk mitigation? | Reducing the likelihood or impact of a risk. |
| 69 What is risk acceptance? | Choosing to accept a risk without taking action to reduce it. |
| 70 What is qualitative risk analysis? | Evaluating risk using categories such as low, medium, and high. |
| 71 What is quantitative risk analysis? | Evaluating risk using numerical values and calculations. |
| 72 What does ALE stand for? | Annual Loss Expectancy |
| 73 What does SLE stand for? | Single Loss Expectancy |
| 74 What does ARO stand for? | Annual Rate of Occurrence |
| 75 What formula is used to calculate ALE? | SLE × ARO |
| 76 What formula is used to calculate SLE? | Asset Value × Exposure Factor |
| 77 What does EF stand for in risk management? | Exposure Factor |
| 78 What is an asset in cybersecurity? | Anything of value that needs protection. |
| 79 What is a vulnerability scan? | An automated process that identifies known weaknesses. |
| 80 What is a penetration test? | An authorized attempt to exploit vulnerabilities. |
| 81 What is a red team exercise? | A simulated attack to test defenses. |
| 82 What is a blue team exercise? | Defensive activities that detect and respond to attacks. |
| 83 What is a purple team exercise? | Collaboration between red and blue teams to improve security. |
| 84 What is log analysis? | Reviewing logs to identify suspicious activity or problems. |
| 85 What is threat intelligence? | Information about current and emerging threats. |
| 86 What is a zero trust model? | A security approach that assumes no user or device is automatically trusted. |
| 87 What is microsegmentation? | Dividing networks into very small secure sections. |
| 88 What is Network Access Control (NAC)? | A system that verifies device security before granting network access. |
| 89 What does CASB stand for? | Cloud Access Security Broker |
| 90 What is a Cloud Access Security Broker (CASB)? | A security layer between users and cloud services. |
| 91 What does IAM stand for? | Identity and Access Management |
| 92 What is Identity and Access Management (IAM)? | Managing user identities and permissions. |
| 93 What does PAM stand for? | Privileged Access Management |
| 94 What does SAML stand for? | Security Assertion Markup Language |
| 95 What is SAML used for? | Sharing authentication information between systems. |
| 96 What does OAuth do? | Allows applications limited access to user resources without sharing passwords. |
| 97 What does OpenID Connect provide? | User authentication built on top of OAuth. |
| 98 What is federation in identity management? | Allowing users to access multiple systems with one identity. |
| 99 What is an identity provider (IdP)? | A system that authenticates users and provides identity information. |
| 100 What is a service provider (SP) in federated identity? | A system that relies on an identity provider for authentication. |
| 101 What is provisioning? | Creating user accounts and assigning access rights. |
| 102 What is deprovisioning? | Removing accounts and access when no longer needed. |
| 103 What is account disablement? | Temporarily preventing a user from logging in. |
| 104 What is account expiration? | Automatically disabling an account after a set date. |
| 105 What is privilege creep? | Users accumulating unnecessary permissions over time. |
| 106 What is an access review? | A periodic check to ensure users have appropriate permissions. |
| 107 What does BCP stand for? | Business Continuity Planning |
| 108 What does DRP stand for? | Disaster Recovery Planning |
| 109 What is the purpose of Business Continuity Planning? | To keep critical business functions operating during disruptions. |
| 110 What is the purpose of Disaster Recovery Planning? | To restore IT systems and data after an incident. |
| 111 What is a hot site? | A fully operational backup facility ready for immediate use. |
| 112 What is a warm site? | A partially equipped backup facility requiring some setup. |
| 113 What is a cold site? | A backup location with basic infrastructure but little or no equipment. |
| 114 What is fault tolerance? | The ability of a system to continue operating after a failure. |
| 115 What is load balancing? | Distributing workloads across multiple systems to improve performance and availability. |
| 116 What is clustering? | Multiple systems working together as one for reliability and performance. |
| 117 What is geographic redundancy? | Keeping systems or data in multiple physical locations. |
| 118 What is data replication? | Copying data between systems or locations. |
| 119 What is a backup retention policy? | Rules for how long backups are stored. |
| 120 What is a full backup? | A backup of all selected data. |
| 121 What is an incremental backup? | A backup of data changed since the last backup. |
| 122 What is a differential backup? | A backup of data changed since the last full backup. |
| 123 What is backup verification? | Confirming that backups can be successfully restored. |
| 124 What is failback? | Returning operations to the original system after recovery. |
| 125 What is a recovery exercise? | Testing recovery procedures to verify readiness. |
| 126 What is a lessons learned review? | An evaluation performed after an incident to improve future responses. |
| 127 What does WEP stand for? | Wired Equivalent Privacy |
| 128 Which wireless security standard is considered the most secure? | WPA3 |
| 129 What advantage does the 5 GHz band have over 2.4 GHz? | Faster speeds and less interference. |
| 130 What advantage does the 2.4 GHz band have over 5 GHz? | Longer range and better wall penetration. |
| 131 What does SSID stand for? | Service Set Identifier |
| 132 What is an SSID? | The name of a wireless network. |
| 133 What is a hidden SSID? | A wireless network name that is not broadcast publicly. |
| 134 What is a wireless access point? | A device that provides wireless network connectivity. |
| 135 What is site surveying in wireless networking? | Evaluating wireless coverage and interference in an area. |
| 136 What is channel overlap? | Multiple wireless networks using the same frequencies and causing interference. |
| 137 What is interference in wireless networking? | Signals that disrupt wireless communication. |
| 138 What does NFC stand for? | Near Field Communication |
| 139 What does RFID stand for? | Radio Frequency Identification |
| 140 What is RFID commonly used for? | Tracking items and controlling physical access. |
| 141 What does SYN stand for in TCP? | Synchronize |
| 142 What is a socket in networking? | A combination of an IP address and a port number. |
| 143 What is a port number used for? | To identify a specific service or application on a device. |
| 144 What is a registered port range? | Ports 1024 through 49151. |
| 145 What is a dynamic or private port range? | Ports 49152 through 65535. |
| 146 What does FQDN stand for? | Fully Qualified Domain Name |
| 147 What is an FQDN? | The complete domain name of a host on the internet. |
| 148 What is a domain controller? | A server that manages authentication and access in a domain. |
| 149 What does AD stand for? | Active Directory |
| 150 What is Active Directory used for? | Managing users, computers, and resources in a network. |
| 151 What does GPO stand for? | Group Policy Object |
| 152 What is a Group Policy Object used for? | Applying settings and restrictions to users and computers. |
| 153 What is Kerberos used for? | Secure authentication in domain environments. |
| 154 What port does Kerberos use? | 88 |
| 155 What does LDAP over SSL use as its default port? | 636 |
| 156 What does SMB stand for? | Server Message Block |
| 157 What is SMB used for? | File and printer sharing on networks. |
| 158 What port does SMB use? | 445 |
| 159 What does NTP stand for? | Network Time Protocol |
| 160 What is NTP used for? | Synchronizing clocks between systems. |
| 161 What port does NTP use? | 123 |
| 162 What does TFTP stand for? | Trivial File Transfer Protocol |
| 163 What is TFTP commonly used for? | Transferring boot files and network device configurations. |
| 164 What port does TFTP use? | 69 |
| 165 What does Syslog do? | Collects and stores log messages from devices. |
| 166 What port does Syslog commonly use? | 514 |
| 167 What port does Telnet use? | 23 |
| 168 What is the main security issue with Telnet? | It sends data in plain text. |
| 169 What does SCP stand for? | Secure Copy Protocol |
| 170 What is SCP used for? | Securely transferring files between systems. |
| 171 What does SFTP stand for? | SSH File Transfer Protocol |
| 172 What is SFTP used for? | Secure file transfers over SSH. |
| 173 What port does SFTP use? | 22 |
| 174 What port does Secure LDAP use? | 636 |
| 175 What does SNMP stand for? | Simple Network Management Protocol |
| 176 What is SNMP used for? | Monitoring and managing network devices. |
| 177 What does MIB stand for in SNMP? | Management Information Base |
| 178 What is a Management Information Base (MIB)? | A database of information about managed devices. |
| 179 What does SNMP trap do? | Sends alerts from devices to management systems. |
| 180 What port does SNMP use for queries? | 161 |
| 181 What port does SNMP use for traps? | 162 |
| 182 What does QoS stand for? | Quality of Service |
| 183 What is Quality of Service (QoS)? | Prioritizing important network traffic. |
| 184 What does VoIP stand for? | Voice over Internet Protocol |
| 185 What is VoIP used for? | Making phone calls over IP networks. |
| 186 What does PoE stand for? | Power over Ethernet |
| 187 What is Power over Ethernet (PoE)? | Delivering electrical power through Ethernet cables. |
| 188 What Ethernet cable type is commonly used for local networks? | Twisted pair cable |
| 189 What does STP stand for in cabling? | Shielded Twisted Pair |
| 190 What does UTP stand for in cabling? | Unshielded Twisted Pair |
| 191 What cable type uses light instead of electricity to transmit data? | Fiber optic cable |
| 192 What is the main advantage of fiber optic cable? | Higher speeds and longer distances with less interference. |
| 193 What does SIEM stand for? | Security Information and Event Management |
| 194 What is the purpose of SIEM? | To collect, analyze, and alert on security events. |
| 195 What does SOAR stand for? | Security Orchestration, Automation, and Response |
| 196 What is the purpose of SOAR? | To automate security workflows and incident response tasks. |
| 197 What does XDR stand for? | Extended Detection and Response |
| 198 What is XDR designed to do? | To correlate and respond to threats across multiple environments. |
| 199 What does UEBA stand for? | User and Entity Behavior Analytics |
| 200 What is UEBA used for? | Detecting unusual user or device behavior that may indicate threats. |
| 201 What does DLP stand for? | Data Loss Prevention |
| 202 What is Data Loss Prevention (DLP)? | Technology that prevents unauthorized sharing of sensitive data. |
| 203 What does FIM stand for? | File Integrity Monitoring |
| 204 What is File Integrity Monitoring (FIM)? | Monitoring files for unauthorized changes. |
| 205 What does EPP stand for? | Endpoint Protection Platform |
| 206 What is an Endpoint Protection Platform (EPP)? | Software that protects endpoint devices from threats. |
| 207 What does PKI stand for? | Public Key Infrastructure |
| 208 What is the purpose of PKI? | To manage digital certificates and encryption keys. |
| 209 What is integrity in cybersecurity? | Ensuring data remains accurate and unaltered. |
| 210 What is availability in cybersecurity? | Ensuring systems and data are accessible when needed. |
| 211 What is confidentiality in cybersecurity? |
Protecting information from unauthorized access. |
NOTIFYWORD MOBILE APP
Learn this set in the mobile app
Use the website to preview, create and edit flashcards. Use the mobile app for AutoLearn, reviews and quizzes.
- AutoLearn reads the front first, then the back
- Learn while listening to your own music
- Set languages, voices, pace and pauses
CREATE FLASHCARDS WITH ANY AI
From an idea to a ready set in minutes
Use ChatGPT or another AI tool. Paste the finished list into a new or existing set, check the preview and import the set into the app.
- 1Copy the prompt and fill in the topic, language, level and number of cards.
- 2Paste the AI response into text import. One line is one flashcard.
- 3Save the set, then open it in the mobile app.
Create [NUMBER] flashcards about [TOPIC].
Language: [LANGUAGE]. Level: [LEVEL].
Return only the finished flashcard list in this exact format:
front - back
Put one flashcard on each line. Use one dash to separate the two sides. Do not add numbering, bullets, tables, headings, code blocks, blank lines, an introduction, or a summary.
READY-TO-IMPORT LIST
Flashcard list format for import
Copy the complete list and paste it into text import. Each line will become one flashcard in the app.
cell - the basic unit of life nucleus - stores genetic material mitochondrion - produces energy for the cell
hello - hola thank you - gracias I need some help - Necesito ayuda Where is the station? - ¿Dónde está la estación?
MORE WAYS TO CREATE FLASHCARDS
Examples in English
See more practical examples
Open the English guide with ready prompts and step-by-step examples.