Secure protocol and identity and access management implementation concepts tested on the Security+ exam.
39 cards · basic cards · AI-written, checked twice. Edit anything.
- What does TLS stand for?
- Transport Layer Security
- Which TLS version is considered secure for current use in Security+?
- TLS 1.2 or TLS 1.3
- What is the purpose of a certificate authority (CA)?
- Issue and digitally sign digital certificates to verify the identity of entities
- What type of certificate is used for a single domain and its subdomains?
- Wildcard certificate
- What does a self-signed certificate lack that a CA-signed certificate has?
- Trust from a recognized certificate authority; requires manual trust establishment
- What is the difference between symmetric and asymmetric encryption?
- Symmetric uses one key to encrypt and decrypt; asymmetric uses a public key to encrypt and a private key to decrypt
- What cryptographic algorithm is used to create a hash for digital signatures?
- SHA-256 or other approved hash functions like SHA-512
- What protocol provides secure remote shell access to systems?
- SSH (Secure Shell)
- What does SSH use to authenticate without a password?
- Public key authentication (SSH key pairs)
- Name three VPN protocols used in enterprise environments.
- IPSec, SSL/TLS VPN, and L2TP are common examples
- What does IPSec provide at the network layer?
- Encryption, authentication, and integrity for IP traffic
- What are the two main IPSec modes and their difference?
- Tunnel mode encrypts entire packets (used for VPN); Transport mode encrypts only the payload
- What is LDAP commonly used for in enterprise environments?
- Directory services and centralized authentication and user account management
- What does OAuth 2.0 enable?
- Secure delegation of access rights without sharing passwords; users authorize third-party applications to access their data
- What is SAML primarily used for?
- Single Sign-On (SSO) across federated identity systems using XML assertions