📚

CompTIA Security+

99 cards · 🇺🇸 English

Essential cybersecurity concepts for the CompTIA Security+ certification

Test PreparationProfessional Certifications

Study all 99 cards for free

Flashcards, quizzes, pixel-art games and a daily review that remembers for you.

Study this deck free

Try the first 10 cards

1 / 10
Question

What is the CIA triad?

Knew itLearning

Tap the card for the answer · swipe right if you knew it, left if not

Already have an account? Sign in

Cards

  1. 1What is the CIA triad?
    Confidentiality, Integrity, Availability - fundamental principles of information security
  2. 2What is confidentiality?
    Ensuring information is accessible only to authorized individuals
  3. 3What is integrity?
    Ensuring information is accurate, complete, and has not been tampered with
  4. 4What is availability?
    Ensuring information and resources are accessible to authorized users when needed
  5. 5What is non-repudiation?
    Preventing someone from denying they performed an action; achieved through digital signatures and logging
  6. 6What is AAA in security?
    Authentication, Authorization, Accounting - framework for controlling access and tracking user activities
  7. 7What is authentication?
    Verifying the identity of a user, device, or system
  8. 8What is authorization?
    Granting or denying access rights to resources based on authenticated identity
  9. 9What is accounting (in AAA)?
    Tracking user activities and resource usage for auditing and billing purposes
  10. 10What are the three factors of authentication?
    Something you know (password), something you have (token), something you are (biometric)
  11. 11What is MFA?
    Multi-Factor Authentication - using two or more authentication factors for stronger security
  12. 12What is SSO?
    Single Sign-On - allows users to authenticate once and access multiple applications
  13. 13What is the principle of least privilege?
    Users should have only the minimum access rights necessary to perform their job functions
  14. 14What is separation of duties?
    Dividing critical tasks among multiple people to prevent fraud and errors
  15. 15What is defense in depth?
    Layered security approach using multiple defensive measures to protect assets
  16. 16What is a vulnerability?
    Weakness in a system that could be exploited to compromise security
  17. 17What is a threat?
    Potential danger that could exploit a vulnerability to cause harm
  18. 18What is risk?
    Likelihood that a threat will exploit a vulnerability, multiplied by the potential impact
  19. 19What is an exploit?
    Code or technique that takes advantage of a vulnerability to compromise a system
  20. 20What is malware?
    Malicious software designed to damage, disrupt, or gain unauthorized access to systems
  21. 21What is a virus?
    Malware that attaches to files and requires user action to spread
  22. 22What is a worm?
    Self-replicating malware that spreads automatically without user action
  23. 23What is a Trojan horse?
    Malware disguised as legitimate software that performs malicious actions
  24. 24What is ransomware?
    Malware that encrypts files and demands payment for decryption key
  25. 25What is spyware?
    Malware that secretly monitors and collects user information
  26. 26What is a rootkit?
    Malware that provides privileged access while hiding its presence from detection tools
  27. 27What is a botnet?
    Network of compromised computers controlled remotely to perform coordinated attacks
  28. 28What is phishing?
    Social engineering attack using fraudulent emails to trick users into revealing sensitive information
  29. 29What is spear phishing?
    Targeted phishing attack aimed at specific individuals or organizations using personalized information
  30. 30What is whaling?
    Spear phishing attack targeting high-profile executives or senior management

And 69 more cards. Study the whole deck free

Articles about this deck

More Test Preparation decks

See all
Study all 99 cards free