Cloud security controls, identity management, and compliance concepts tested on the CompTIA Cloud+ exam.
35 cards · basic cards · AI-written, checked twice. Edit anything.
- What is the principle of least privilege?
Show answer
Users and processes should have only the minimum permissions needed to perform their job functions.- What is role-based access control (RBAC)?
Show answer
A method of controlling access to resources based on user role assignments rather than individual permissions.- What is multi-factor authentication (MFA)?
Show answer
Authentication requiring multiple verification methods, such as password plus a one-time code.- What does AAA stand for in security?
Show answer
Authentication, Authorization, and Accounting.- What is a cryptographic hash?
Show answer
A one-way function that takes input and produces a fixed-length output that cannot be reversed.- What is symmetric encryption?
Show answer
Encryption using the same key for both encryption and decryption.- What is asymmetric encryption?
Show answer
Encryption using two keys: a public key for encryption and a private key for decryption.- What is a digital certificate?
Show answer
A document that verifies the ownership of a public key, typically signed by a certificate authority.- What does PKI stand for?
Show answer
Public Key Infrastructure.- What is compliance?
Show answer
The process of meeting legal, regulatory, and organizational requirements.- What is HIPAA?
Show answer
Health Insurance Portability and Accountability Act, a US regulation protecting health information privacy.- What is PCI DSS?
Show answer
Payment Card Industry Data Security Standard, a set of requirements for handling payment card data.- What is SOC 2?
Show answer
Service Organization Control 2, a framework for evaluating security, availability, processing integrity, confidentiality, and privacy.- What is ISO 27001?
Show answer
International standard for information security management systems.- What is data classification?
Show answer
The process of organizing data into categories based on sensitivity level or business impact.
FlashKeepers