Secure protocol and identity and access management implementation concepts tested on the Security+ exam.
39 cards · basic cards · AI-written, checked twice. Edit anything.
- What does TLS stand for?
Show answer
Transport Layer Security- Which TLS version is considered secure for current use in Security+?
Show answer
TLS 1.2 or TLS 1.3- What is the purpose of a certificate authority (CA)?
Show answer
Issue and digitally sign digital certificates to verify the identity of entities- What type of certificate is used for a single domain and its subdomains?
Show answer
Wildcard certificate- What does a self-signed certificate lack that a CA-signed certificate has?
Show answer
Trust from a recognized certificate authority; requires manual trust establishment- What is the difference between symmetric and asymmetric encryption?
Show answer
Symmetric uses one key to encrypt and decrypt; asymmetric uses a public key to encrypt and a private key to decrypt- What cryptographic algorithm is used to create a hash for digital signatures?
Show answer
SHA-256 or other approved hash functions like SHA-512- What protocol provides secure remote shell access to systems?
Show answer
SSH (Secure Shell)- What does SSH use to authenticate without a password?
Show answer
Public key authentication (SSH key pairs)- Name three VPN protocols used in enterprise environments.
Show answer
IPSec, SSL/TLS VPN, and L2TP are common examples- What does IPSec provide at the network layer?
Show answer
Encryption, authentication, and integrity for IP traffic- What are the two main IPSec modes and their difference?
Show answer
Tunnel mode encrypts entire packets (used for VPN); Transport mode encrypts only the payload- What is LDAP commonly used for in enterprise environments?
Show answer
Directory services and centralized authentication and user account management- What does OAuth 2.0 enable?
Show answer
Secure delegation of access rights without sharing passwords; users authorize third-party applications to access their data- What is SAML primarily used for?
Show answer
Single Sign-On (SSO) across federated identity systems using XML assertions
FlashKeepers