Test your basic knowledge |

Comptia Security +: Vocab

Instructions:
  • Answer 50 questions in 15 minutes.
  • If you are not ready to take this test, you can study here.
  • Match each statement with the correct term.
  • Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. The fraudulent appropriation by a person to his own use of property or money entrusted to that person's care but owned by someone else.






2. A site that is ready and available within minutes or hours to continue processing. This is a site that is fully configured and ready to go.






3. A person able to exploit a system or gain unauthorized access through skill and tactics. This usually refers to a black hat hacker. There are also white hats (ethical hackers) - and grey hats.






4. Procedures for when an employee is terminated to ensure that they are aware of their responsibilities and turn in all company property.






5. Motivational tools for employee awareness to get them to report security flaws in an organization






6. In cryptanalysis and computer security - this attack is a technique for defeating a cipher or authentication mechanism by trying to determine its decryption key or passphrase by searching a large number of possibilities. In contrast with a brute forc






7. In computing - the Challenge-Handshake Authentication Protocol authenticates a user to an Internet access provider. CHAP provides protection against playback attack by the peer through the use of an incrementally changing identifier and of a variable






8. Network devices that operate at layer 3. This device separates broadcast domains.






9. A number of computer software products and specifications from Sun Microsystems that together provide a system for developing and deploying cross-platform applications. Java is used in a wide variety of computing platforms spanning from embedded devi






10. Confidentiality - Integrity - and Availability






11. A site that has some equipment in place - and can be up within days






12. A specialized form of software authentication that enables a user to authenticate once and gain access to the resources of multiple software systems.






13. Telephone tapping (or wire tapping/wiretapping in the US) is the monitoring of telephone and Internet conversations by a third party - often by covert means. The telephone tap or wire tap received its name because historically - the monitoring connec






14. The Teardrop attack involved sending IP fragments with overlapping payloads to the target machine.






15. Being able to control access to individuals very specifically - instead of lower in the OSI model where you cant set it so specifically






16. The apparent simultaneous performance of two or more tasks by a computer's central processing unit.






17. In computing - Secure Shell or SSH is a set of standards and an associated network protocol that allows establishing a secure channel between a local and a remote computer. It uses public-key cryptography to authenticate the remote computer and (opti






18. 'If you cant see it - its secure'. Bad policy to live by.






19. The practice of obtaining confidential information by manipulation of legitimate users.






20. Signal degradation as it moves farther from its source






21. These viruses usually infect both boot records and files.






22. Methodical process of finding and reducing the number of bugs - or defects - in a computer program or a piece of electronic hardware thus making it behave as expected






23. An instance of a scripting language






24. The EU spec. If databases exist - users are allowed to check data into them - allowed to change them if wrong - etc.






25. The practice of following someone with a security code or keycard through a security door - generally in workplaces.






26. ('rotate by 13 places' - sometimes hyphenated ROT-13) Is a simple Caesar cipher used for obscuring text by replacing each letter with the letter thirteen places down the alphabet






27. Encompasses Risk Analysis and Risk Mitigation






28. A technique to eliminate data redundancy.






29. An AAA (Authentication - Authorization - and Accounting) protocol for applications such as network access or IP mobility. It is intended to work in both local and roaming situations.






30. Internet Relay Chat.






31. Trusted Computing Base. Comprised of the hardware - software - and firmware of the system.






32. These cryptographic protocols provide secure communications on the Internet. SSL provides endpoint authentication and communications privacy over the Internet using cryptography. In typical use - only the server is authenticated while the client rema






33. Identifying risks and assessing the possible damage that can be caused in order to justify security safeguards






34. A network that mimics the brain






35. Dynamic Host Configuration Protocol.






36. Communications that don't take the natural course of email (when you don't want eavesdropping to happen)






37. Data storage formats and equipment that allow the stored data to be accessed in any order






38. The 7 layer model defined by the ISO. Memorized by 'All People Seem To Need Data Processing' and 'Please Do Not Throw Sausage Pizza Away'. Actually - the layers are Application - Presentation - Session - Transport - Network - Data Link - Physical






39. A military standard defining controls for emanation protection






40. Technical are IT implemented. Administrative items are things that HR implements. Physical things are things that are tangible.






41. Provides for less data leakage. Longer distance. Uses light instead of electrical impulse.






42. An international standard defining security assurance and functionality profiles. Replaced the TCSEC - ITSEC - etc.






43. Determines the monetary loss (impact) for each occurrence of a threatened event. SLE = Asset Value x Exposure Factor






44. Closed Circuit Television






45. Chief Information Officer






46. Refers to a cryptographic signature - either on a document - or on a lower-level data structure that signs an item electronically.






47. Once authenticated - the level of access you have to a system






48. Same as AES Advanced Encryption Standard (AES) - also known as Rijndael - is a block cipher adopted as an encryption standard by the US government. It is expected to be used worldwide and analyzed extensively - as was the case with its predecessor -






49. A gas used in fire suppression. Not human safe. Chemical reaction.






50. Countermeasures / safeguards fall into these categories. Detective measures detect - preventive measures prevent - and corrective measures correct.