Test your basic knowledge |

Comptia Security +: Vocab

Instructions:
  • Answer 50 questions in 15 minutes.
  • If you are not ready to take this test, you can study here.
  • Match each statement with the correct term.
  • Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. 'If you cant see it - its secure'. Bad policy to live by.






2. A hidden communications channel on a system that allows for the bypassing of the system security policy






3. Random Number Base






4. The process of training end users / employees in the ways and processes of security. This helps to mitigate risk to the company (if the employees know what to do) and also helps the employees to know what is expected of them security-wise - so that t






5. The real cost of acquiring/maintaining/developing a system






6. A network entity that provides a single entrance / exit point to the Internet.






7. A military standard defining controls for emanation protection






8. Being able to control access to individuals very specifically - instead of lower in the OSI model where you cant set it so specifically






9. Same as a block cipher except that it is applied to a data stream one bit at a time






10. The frequency with which a threat is expected to occur.






11. Enticing people to hit your honeypot to see how they try to access your system.






12. A name given to a system implemented by the FBI that is analogous to wiretapping except in this case - e-mail and other communications are being tapped instead of telephone conversations. Carnivore was essentially a customizable packet sniffer that c






13. Refers to a cryptographic signature - either on a document - or on a lower-level data structure that signs an item electronically.






14. A self-replicating computer program - similar to a computer virus. A virus attaches itself to - and becomes part of - another executable program; however - a worm is self-contained and does not need to be part of another program to propagate itself.






15. A team of individuals at the highest level of organizational management who have the day-to-day responsibilities of managing a corporation. And don't forget - they are always the ones ultimately responsible for due diligence / due care. They are also






16. A system designed to stop piggybacking.






17. ('rotate by 13 places' - sometimes hyphenated ROT-13) Is a simple Caesar cipher used for obscuring text by replacing each letter with the letter thirteen places down the alphabet






18. These can be used to verify that public keys belong to certain individuals.






19. Disclosure - Alteration - Destruction. These things break the CIA triad






20. A site that is ready physically but has no hardware in place - all it has is HVAC






21. The process of reducing your risks to an acceptable level based on your risk analysis






22. Any authentication protocol that requires two independent ways to establish identity and privileges. This contrasts with traditional password authentication - which requires only one factor (knowledge of a password) in order to gain access to a syste






23. Among the most common types of viruses and the least damaging - these are hidden within applications that must be executed in order to execute the virus.






24. In computer terminology - a honeypot is a trap set to detect - deflect or in some manner counteract attempts at unauthorized use of information systems. Generally it consists of a computer - data or a network site that appears to be part of a network






25. Computer Incident Response Team






26. A RFC standard. A mechanism for performing commands on a remote system






27. A form of redundancy check (a very simple measure for protecting the integrity of data by detecting errors in data that is sent through space or time.






28. Access control method for database based on the content of the database to provide granular access






29. In computer security and programming - it is an anomalous condition where a process attempts to store data beyond the boundaries of a buffer. The result is that the extra data overwrites adjacent memory locations. The overwritten data may include oth






30. The 7 layer model defined by the ISO. Memorized by 'All People Seem To Need Data Processing' and 'Please Do Not Throw Sausage Pizza Away'. Actually - the layers are Application - Presentation - Session - Transport - Network - Data Link - Physical






31. Business Impact Analysis. A BIA is a functional analysis in which a team collects data through interviews and documentary sources. It documents business functions - activities - and transactions.






32. Making individuals accountable for their actions on a system typically through the use of auditing






33. False Acceptance Rate - False Rejection Rate - Crossover Error Rate






34. Emanations from one wire coupling with another wire






35. Be at least 8 foot tall and have three strands of barbed wire.






36. A computer program that contains some of the subject-specific knowledge of one or more human experts. The most common form of expert systems is a program (like a wizard) made up of a set of rules that analyze information (usually supplied by the user






37. Project initiation - functional design analysis and planning - system design specifications - software development - installation/implementation - operational/maintenance - disposal






38. Also known as a tunnel)






39. The EU spec. If databases exist - users are allowed to check data into them - allowed to change them if wrong - etc.






40. 0 = striping without parity 1 = mirroring 3 = striping with parity (parity on single drive) 5 = striping with parity (parity striped across all drives)






41. When security is managed at a central point in an organization






42. A compact disc that contains data only accessible by a computer. All modern CD-ROM drives can also read audio CDs. It is possible to produce composite CDs containing both data and audio with the latter capable of being played on a CD player - whilst






43. Software designed to infiltrate or damage a computer system - without the owner's consent.






44. A legal term used to describe an out-of-court statement offered to establish the truth of the facts asserted in that statement. Hearsay is generally not admissible in common law courts because it is of dubious value - but there are many exceptions to






45. Virtual LANs. Separating broadcast domains on a single network. A way of partitioning communications channels.






46. A hidden value or set of values that allows access to a program - computer system - or data. It is sometimes erroneously confused with a backdoor - which (in a computer system) is a method of bypassing normal authentication or securing remote access






47. An audit trail is a chronological sequence of audit records - each of which contains evidence directly pertaining to and resulting from the execution of a business process or system function. Audit records typically result from activities such as tra






48. Defines the objects and their attributes that exist in a database.






49. Countermeasures / safeguards fall into these categories. Detective measures detect - preventive measures prevent - and corrective measures correct.






50. This deals with differences between plaintext password storage and transmission - versus encrypted password storage and transmission.