Test your basic knowledge |

Comptia Security +: Vocab

Instructions:
  • Answer 50 questions in 15 minutes.
  • If you are not ready to take this test, you can study here.
  • Match each statement with the correct term.
  • Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. A sandbox. Emulates an operating environment.






2. A technique to eliminate data redundancy.






3. A RFC standard. A mechanism for performing commands on a remote system






4. A meme and a joke are the same thing. e.g. When someone says to delete a file that is really just fine and they call it a virus






5. A birthday attack is a type of cryptographic attack which exploits the mathematics behind the birthday paradox - making use of a space-time tradeoff.






6. Network device that operates at layer 1. Concentrator.






7. 'If you cant see it - its secure'. Bad policy to live by.






8. The process of developing a planned approach to change in an organization. Typically the objective is to maximize the collective benefits for all people involved in the change and minimize the risk of failure of implementing the change.






9. A class of storage media used in computers and other electronic devices. Because it cannot (easily) be written to - its main uses lie in the distribution of firmware.






10. A legal term used to describe an out-of-court statement offered to establish the truth of the facts asserted in that statement. Hearsay is generally not admissible in common law courts because it is of dubious value - but there are many exceptions to






11. A hash function (or hash algorithm) is a way of creating a small digital 'fingerprint' from any kind of data. The function chops and mixes the data to create the fingerprint - often called a hash value. The hash value is commonly represented as a sho






12. Virtual LANs. Separating broadcast domains on a single network. A way of partitioning communications channels.






13. Enticing people to hit your honeypot to see how they try to access your system.






14. Basic Input/Output System






15. A set of exclusive rights granted by governments to regulate the use of a particular expression of an idea or information. Artists ability to control their work






16. When security is managed at many different points in an organization






17. In a computer system (or cryptosystem or algorithm) these are methods of bypassing normal authentication or securing remote access to a computer - while attempting to remain hidden from casual inspection.






18. Someone who hacks






19. In computing - it is software that is embedded in a hardware device. It is often provided on flash ROMs or as a binary image file that can be uploaded onto existing hardware by a user.






20. Confidentiality - Integrity - and Availability






21. If an employee is suspected of wrongdoing - sending them away from work for a while so that their actions can be audited.






22. The real cost of acquiring/maintaining/developing a system






23. An organization that got their fame from telling the Senate Judiciary Committee that they could bring down the Internet in 30 minutes. Black hat....






24. A type of virus that changes its telltale code segments so that it ' looks' different from one infected file to another - thus making detection more difficult.






25. A denial-of-service attack is an attack on a computer system or network that causes a loss of service to users - typically the loss of network connectivity and services by consuming the bandwidth of the victim network or overloading the computational






26. a.k.a. The Chinese wall. Nash Bridges - Bridge wall - Chinese wall. Dynamically changes access control to prevent unauthorized access.






27. Data storage formats and equipment that allow the stored data to be accessed in any order






28. Internet Relay Chat.






29. CISSPs subscribe to a code of ethics for building up the security profession






30. In computer terminology - a honeypot is a trap set to detect - deflect or in some manner counteract attempts at unauthorized use of information systems. Generally it consists of a computer - data or a network site that appears to be part of a network






31. The process of training end users / employees in the ways and processes of security. This helps to mitigate risk to the company (if the employees know what to do) and also helps the employees to know what is expected of them security-wise - so that t






32. In a separation of duties model - this is where code is checked in and out






33. Personal - Network - and Application






34. Emanations from one wire coupling with another wire






35. Procedures for when an employee is terminated to ensure that they are aware of their responsibilities and turn in all company property.






36. In computer security - this type of attack is a situation in which one person or program successfully masquerades as another by falsifying data and thereby gains an illegitimate advantage.






37. The output of a hash function is a digest.






38. The most popular computer language used to create - modify - retrieve and manipulate data from relational database management systems. The language has evolved beyond its original purpose to support object-relational database management systems. It i






39. Disclosure - Alteration - Destruction. These things break the CIA triad






40. Jumping into dumpsters to retrieve information about someone/something/a company






41. An automated tool with a database of known vulnerabilities that check systems for those vulnerabilities






42. Component Object Model.






43. In telecommunications - a callback occurs when the originator of a call is immediately called back in a second call as a response. This helps to make sure that only authorized people are calling in as the number dialing in has to be in the list. Howe






44. More discriminate than dogs






45. A person able to exploit a system or gain unauthorized access through skill and tactics. This usually refers to a black hat hacker. There are also white hats (ethical hackers) - and grey hats.






46. Packet sniffers (also known as network or protocol analyzers or Ethernet sniffers) are computer software (usually) or computer hardware that can intercept and log traffic passing over a digital network or part of a network. As data streams travel bac






47. Telephone tapping (or wire tapping/wiretapping in the US) is the monitoring of telephone and Internet conversations by a third party - often by covert means. The telephone tap or wire tap received its name because historically - the monitoring connec






48. The idea is that a computer program may be seen as comprising a collection of individual units - or objects - that act on each other - as opposed to a traditional view in which a program may be seen as a collection of functions - or simply as a list






49. Packet sniffers (also known as Network Analyzers or Ethernet Sniffers) are software programs that can see the traffic passing over a network or part of a network. As data streams travel back and forth over the network - the program captures each pack






50. Continuation of Operations Plan