Comptia Sec+ Syo-401

Front 1

As an information security officer, what are the information security goals that you need to have in mind while defining the protection you will need?(select all that apply)

Prevention

Auditing

Recovery

Detection

Back 1

Prevention

Recovery

Detection

Front 2

3DES

Back 2

A symmetric encryption algorithm that encrypts data by processing each block of data three times, using a different DES key each time.

Front 3

802.11n

Back 3

A wireless standard for home and business implementations that adds QoS features and multimedia support to 802.11a and 802.11b.

Front 4

802.11

Back 4

A family of specifications developed by the IEEE for wireless LAN technology.

Front 5

802.11a

Back 5

A fast, secure, but relatively expensive protocol for wireless communication. The 802.11a protocol supports speeds up to 54 Mbps in the 5GHz frequency.

Front 6

802.1a

Back 6

An IEEE standard used to provide a port-based authentication mechanism over a LAN or wireless LAN.

Front 7

access control

Back 7

In security terms, the process of determining and assigning privileges to various resources, objects, and data.

Front 8

802.11 ac

Back 8

A wireless communication protocol that improves upon 802.11 n by adding wider channels to increase bandwidth.

Front 9

802.11 b

Back 9

The first specification to be called Wi-Fi, The least expensive wireless network protocol used to transfer data among computers with wireless network cards. or between a wireless computer or device and a wired LAN. It provides for an 11 Mbps transfer rate in the 2.4 GHz frequency.

Front 10

802.11 g

Back 10

A specification for wireless data throughput at the rate of up to 54 Mbps in the 2.4 GHz band that is a potential replacement for 802.11 b.

Front 11

account federation

Back 11

The practice of linking a single account across many different management systems.

Front 12

account management

Back 12

A common term used to refer to the processes, functions, and policies used to effectively manage user accounts within an organization.

Front 13

account phishing

Back 13

In social networking, an attack where an attacker creates an account and gets on the friends list of an individual just to try to obtain information about the individual and their circle of friends or colleagues.

Front 14

account policy

Back 14

A document that includes an organization's user account management guidelines.

Front 15

ALE

Back 15

(annual loss expectancy) The total risk to an organization on an annual basis.

Front 16

account privileges

Back 16

Permissions granted to users that allow them to perform various actions such as creating, deleting, and editing files, and also accessing systems and services on the network.

Front 17

al-in-one security appliance

Back 17

A single network device that is used to perform a number of security functions to secure a network.

Front 18

accountability

Back 18

In security terms, the process of determining who to hold responsible for a particular activity or event.

Front 19

accounting

Back 19

In security terms, the process of tracking and recording system activities and resource access.

Front 20

anomaly-based monitoring

Back 20

A monitoring system that uses a database of unacceptable traffic patterns identified by analyzing traffic flows.

Front 21

ACL

Back 21

(access control list) In a DAC access control scheme, this is the list that is associated with each object, specifying the subjects that can access the object and their levels of access.

Front 22

anti-malware software

Back 22

A category of software programs that scan a computer or network for known viruses, Trojans, worms, and other malicious software.

Front 23

anti-spam

Back 23

A program that will detect specific words that are commonly used in spam messages.

Front 24

Active Directory

Back 24

The standards-based directory service from Microsoft that runs on Microsoft Windows servers.

Front 25

anti-spyware

Back 25

Software the is specifically designed to protect systems against spyware attacks.

Front 26

antivirus software

Back 26

An application that scans files for executable code that matches specific patterns that are known to be common to viruses.

Front 27

adware

Back 27

Software that automatically displays or downloads advertisements when it is used.

Front 28

API

Back 28

(application programming interface) A mechanism that defines how software elements interact with each other.

Front 29

AES

Back 29

(Advanced Encryption Standard) A symmetric 128-, 192-, or 256-bit block cipher based on the Rijndael algorithm developed by Belgian cryptographers Joan Daemen and Vincent Rojmen and adopted by the U.S. government as its encryption standard to replace DES.

Front 30

application attacks

Back 30

Attacks that are targeted at web-based and other client-server applications.

Front 31

application aware device

Back 31

A network device that manages information about any application that connects to it.

Front 32

application blacklisting

Back 32

The practice of preventing undesirable programs from running on a computer, computer network, or mobile device.

Front 33

attack

Back 33

Any technique that is used to exploit a vulnerability in any application on a computer system without the authorization to do so.

Front 34

attack surface

Back 34

The portion of a system or application that is exposed and available to attackers.

Front 35

application whitelisting

Back 35

The practice of allowing approved programs to run on a computer, computer network, or mobile device.

Front 36

attackers

Back 36

A term for users who gain unauthorized access to computers and networks for malicious purposes.

Front 37

arbitrary code execution

Back 37

Am attack that exploits an application vulnerability into allowing the attacker to execute commands on a user's computer.

Front 38

archive bit

Back 38

A file property that essentially indicates whether the file has been modified since the last back up.

Front 39

auditing

Back 39

The final phase of a hack in which the attacker steals data, disrupts traffic, or damages systems.

Front 40

armored virus

Back 40

A virus that is able to conceal its location or otherwise render itself harder to detect by anti-virus malware programs.

Front 41

authentication

Back 41

In security terms, the process of validating a particular individual or entity's unique credentials.

Front 42

ARO

Back 42

(annual rate of occurrence) How many times per year a particular loss is expected to occur.

Front 43

authorization

Back 43

In security terms, the process of determining what rights and privileges a particular entity has.

Front 44

ARP

Back 44

(Address Resolution Protocol) The mechanism by which individual hardware MAC addresses are matched to an IP address on a network.