Test your basic knowledge |

Comptia Security +: Vocab

Instructions:
  • Answer 50 questions in 15 minutes.
  • If you are not ready to take this test, you can study here.
  • Match each statement with the correct term.
  • Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. Grabs an image of the finger which is then stored in a database and then works in a one-to-many database






2. This deals with differences between plaintext password storage and transmission - versus encrypted password storage and transmission.






3. In cryptography - it is a block cipher






4. Hardware - software - and firmware elements of a TCB that implement the fundamental security procedures for controlling access to system resources






5. In cryptanalysis - this attack is a method of defeating a cryptographic scheme by trying a large number of possibilities; for example - exhaustively working through all possible keys in order to decrypt a message. In most schemes - the theoretical po






6. In the broadest sense - a fraud is a deception made for personal gain






7. The frequency with which a threat is expected to occur.






8. The process of training end users / employees in the ways and processes of security. This helps to mitigate risk to the company (if the employees know what to do) and also helps the employees to know what is expected of them security-wise - so that t






9. Technical are IT implemented. Administrative items are things that HR implements. Physical things are things that are tangible.






10. A person able to exploit a system or gain unauthorized access through skill and tactics. This usually refers to a black hat hacker. There are also white hats (ethical hackers) - and grey hats.






11. Residual physical representation of data that has been in some way erased. After storage media is erased there may be some physical characteristics that allow data to be reconstructed.






12. Distributed Component Object Model. Microsoft's implementation of CORBA.






13. 0 = striping without parity 1 = mirroring 3 = striping with parity (parity on single drive) 5 = striping with parity (parity striped across all drives)






14. Transferring your risk to someone else - typically an insurance company






15. In risk assessment - the average monetary value of losses per year. SLE x ARO = ALE






16. The process of certifying a system that has been built to ensure that it meets the security standards that you have said you will use.






17. A distinctive sign of some kind which is used by a business to uniquely identify itself and its products and services to consumers - and to distinguish the business and its products and / or services from those of other businesses.






18. Class A (1-126.x.x.x) - Class B (128-191.x.x.x) - Class C (192-223.x.x.x)






19. Communications that don't take the natural course of email (when you don't want eavesdropping to happen)






20. In classical cryptography - a transposition cipher changes one character from the plaintext to another (to decrypt the reverse is done). That is - the order of the characters is changed. Mathematically a bijective function is used on the characters'






21. Base 64 is a positional numeral system using a base of 64. It is the largest power of two base that can be represented using only printable ASCII characters. This has led to its use as a transfer encoding for e-mail among other things.






22. Assuming someone's session who is unaware of what you are doing






23. A site that is ready physically but has no hardware in place - all it has is HVAC






24. A method of encrypting text to produce cipher text in which a cryptographic key and algorithm are applied to a block of data as a group instead of one bit at a time






25. This is the file on a UNIX system where usernames to password MD5 hash outputs are stored. The system uses this file to determine if the password entered for a given username is correct.






26. The process of reducing your risks to an acceptable level based on your risk analysis






27. Non-repudiation is the concept of ensuring that a contract - especially one agreed to via the Internet - cannot later be denied by one of the parties involved.






28. A form of binary to text encoding that originated as a Unix program for encoding binary data for transmission over the uucp mail system. The name 'uuencode' is derived from 'Unix-to-Unix encoding'. Since uucp converted characters between various comp






29. Basic Input/Output System






30. ('rotate by 13 places' - sometimes hyphenated ROT-13) Is a simple Caesar cipher used for obscuring text by replacing each letter with the letter thirteen places down the alphabet






31. A specialized version of a data warehouse. Like data warehouses - data marts contain a snapshot of operational data that helps business people to strategize based on analyses of past trends and experiences. The key difference is that the creation of






32. Packet sniffers (also known as network or protocol analyzers or Ethernet sniffers) are computer software (usually) or computer hardware that can intercept and log traffic passing over a digital network or part of a network. As data streams travel bac






33. When one key of a two-key pair has more encryption pattern than the other






34. A denial-of-service attack is an attack on a computer system or network that causes a loss of service to users - typically the loss of network connectivity and services by consuming the bandwidth of the victim network or overloading the computational






35. Methodical process of finding and reducing the number of bugs - or defects - in a computer program or a piece of electronic hardware thus making it behave as expected






36. Random Number Base






37. Motive - Opportunity - and Means. These deal with crime.






38. The amount of users that the system can process in a given amount of time. A typical acceptable amount is 10/minute






39. To not be legal (as far as law is concerned) or ethical






40. Network devices that operate at layer 3. This device separates broadcast domains.






41. A type of virus that changes its telltale code segments so that it ' looks' different from one infected file to another - thus making detection more difficult.






42. The 7 layer model defined by the ISO. Memorized by 'All People Seem To Need Data Processing' and 'Please Do Not Throw Sausage Pizza Away'. Actually - the layers are Application - Presentation - Session - Transport - Network - Data Link - Physical






43. A computer program that contains some of the subject-specific knowledge of one or more human experts. The most common form of expert systems is a program (like a wizard) made up of a set of rules that analyze information (usually supplied by the user






44. The most popular computer language used to create - modify - retrieve and manipulate data from relational database management systems. The language has evolved beyond its original purpose to support object-relational database management systems. It i






45. Animals with teeth. Not as discriminate as guards






46. RFC 1918 defined the following addresses as the private addressing ranges: 192.168.x.x - 10.x.x.x - 172.16.x.x - 172.31.x.x






47. A form of redundancy check (a very simple measure for protecting the integrity of data by detecting errors in data that is sent through space or time.






48. Reasonable doubt






49. The practice of obtaining confidential information by manipulation of legitimate users.






50. When you know something from a source - and can infer other related information based off of what you know - when you may not necessarily have access to that data normally.