Test your basic knowledge |

Comptia Security +: Vocab

Instructions:
  • Answer 50 questions in 15 minutes.
  • If you are not ready to take this test, you can study here.
  • Match each statement with the correct term.
  • Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. Project initiation - functional design analysis and planning - system design specifications - software development - installation/implementation - operational/maintenance - disposal






2. The attacker sends a SYN request to the victims machine and the victim machine allocates resources for that request and sends a SYN/ACK back. The attacking machine doesn't respond however - but instead sends another SYN and continues to do so until t






3. In cryptanalysis and computer security - this attack is a technique for defeating a cipher or authentication mechanism by trying to determine its decryption key or passphrase by searching a large number of possibilities. In contrast with a brute forc






4. Class A (1-126.x.x.x) - Class B (128-191.x.x.x) - Class C (192-223.x.x.x)






5. Someone who hacks






6. In computing - it is software that is embedded in a hardware device. It is often provided on flash ROMs or as a binary image file that can be uploaded onto existing hardware by a user.






7. This is an open international standard for applications that use wireless communications.






8. A spoofing attack - a kind of attack in data communication - in which a third party tries to mislead the communication participants using forged information.






9. Personal - Network - and Application






10. Emanations from one wire coupling with another wire






11. Method of authenticating to a system. Something that you supply and something you know.






12. A compact disc that contains data only accessible by a computer. All modern CD-ROM drives can also read audio CDs. It is possible to produce composite CDs containing both data and audio with the latter capable of being played on a CD player - whilst






13. The physical part of a computer - as distinguished from the computer software that executes within the hardware.






14. A component in the Wireless Application Protocol (WAP) protocol stack. It sits between the WTP and WDP layers in the WAP communications stack.






15. The government required overwrite rate if you are formatting a drive in such a manner as to make it nearly impossible to retrieve data from it






16. A site that has some equipment in place - and can be up within days






17. A card that holds information that must be authenticated to before it can reveal the information that it is holding






18. Provides a means to obtain passwords or encryption keys and thus bypass other security measures. This can be accomplished through hardware or software means.






19. In computer networking - this is the method for finding a host's hardware address when only its IP address is known. Due to the overwhelming prevalence of IPv4 and ethernet - ARP is primarily used to translate ethernet MAC addresses from IP addresses






20. A logic bomb is a piece of code intentionally inserted into a software system that will set off a malicious function when specified conditions are met.






21. Federal law with many aspects designed to curb terrorist activities; impacts real estate transactions because of disclosure requirements imposed on escrow agents regarding transfer of title and deposits of cash; imposes new disclosure and signature r






22. In computing - the Challenge-Handshake Authentication Protocol authenticates a user to an Internet access provider. CHAP provides protection against playback attack by the peer through the use of an incrementally changing identifier and of a variable






23. A unit that will detect motion for the purpose of setting of the alarms to alert for unauthorized access.






24. A technique to eliminate data redundancy.






25. An attacker spoofs the source IP in a packet header - to make a ping request appear to have originated from the future victim's network - then the responding network responds in full force to these requests and brings down the victim's network.






26. In cryptography - a substitution cipher is a method of encryption by which units of plaintext are substituted with ciphertext according to a regular system; the 'units' may be single letters (the most common) - pairs of letters - triplets of letters






27. A SSO technology that extends Kerberos functionality and improve upon its weaknesses.






28. These can be used to verify that public keys belong to certain individuals.






29. A war dialing utility






30. The process of developing a planned approach to change in an organization. Typically the objective is to maximize the collective benefits for all people involved in the change and minimize the risk of failure of implementing the change.






31. Attack which does not result in an unauthorized state change - such as an attack that only monitors and/or records data.






32. Motive - Opportunity - and Means. These deal with crime.






33. These viruses usually infect both boot records and files.






34. An attack which results in an unauthorized state change - such as the manipulation of files - or the adding of unauthorized files.






35. Trusted Computing Base. Comprised of the hardware - software - and firmware of the system.






36. Non-repudiation is the concept of ensuring that a contract - especially one agreed to via the Internet - cannot later be denied by one of the parties involved.






37. In a separation of duties model - this is where code is checked in and out






38. A system designed to stop piggybacking.






39. Methodical process of finding and reducing the number of bugs - or defects - in a computer program or a piece of electronic hardware thus making it behave as expected






40. Must be in place for you to use a biometric system






41. In computer security and programming - it is an anomalous condition where a process attempts to store data beyond the boundaries of a buffer. The result is that the extra data overwrites adjacent memory locations. The overwritten data may include oth






42. A form of redundancy check (a very simple measure for protecting the integrity of data by detecting errors in data that is sent through space or time.






43. In computer security - this type of attack is a situation in which one person or program successfully masquerades as another by falsifying data and thereby gains an illegitimate advantage.






44. Demilitarized Zone. A part of the network that is neither part of the internal network nor directly part of the Internet. Basically a network sitting between two networks.






45. Using ICMP to diagram a network






46. A network that mimics the brain






47. Confidentiality - Integrity - and Availability






48. The effort made by an ordinarily prudent or reasonable party to avoid harm to another party or himself. Deals with liability.






49. A chipset that was developed and promoted by the U.S. Government as an encryption device to be adopted by telecommunications companies for voice transmission.






50. Technical are IT implemented. Administrative items are things that HR implements. Physical things are things that are tangible.