Core cybersecurity vocabulary and concepts tested on the Security+ exam.
45 cards · basic cards · AI-written, checked twice. Edit anything.
- What are the three components of the AAA model in network security?
Show answer
Authentication (verifying identity), Authorization (granting access rights), and Accounting (logging activity).- How does RADIUS differ from TACACS+?
Show answer
RADIUS uses UDP and combines authentication with accounting, while TACACS+ uses TCP and separates authentication, authorization, and accounting into distinct processes.- What does role-based access control (RBAC) use to determine permissions?
Show answer
User roles or job titles within an organization; permissions are assigned to roles rather than individual users.- How does attribute-based access control (ABAC) differ from RBAC?
Show answer
ABAC uses attributes such as user properties, resource properties, and environmental conditions to make access decisions, offering more granular control than role alone.- What is AES and what key sizes does it support?
Show answer
AES (Advanced Encryption Standard) is a symmetric block cipher; it supports key sizes of 128, 192, and 256 bits.- What is RSA primarily used for?
Show answer
RSA is an asymmetric algorithm used for key exchange, digital signatures, and encrypting small amounts of data.- What is the purpose of a hash function?
Show answer
To convert input data of any size into a fixed-size output (hash) that is unique to that input; hashes are one-way functions.- What does a digital signature provide?
Show answer
Authentication (verifies the sender's identity), non-repudiation (sender cannot deny sending it), and integrity (message has not been altered).- What is a certificate authority (CA)?
Show answer
A trusted third party that issues and signs digital certificates to verify the identity and public key of individuals or entities.- What is social engineering?
Show answer
An attack that exploits human psychology and trust to manipulate people into divulging confidential information or performing actions that compromise security.- What is privilege escalation?
Show answer
An attack where a user with limited access gains higher-level permissions to access resources or functionality they should not have access to.- What is a zero-day vulnerability?
Show answer
A previously unknown software flaw for which no patch or fix has been released; attackers may exploit it before developers discover it.- What does GDPR regulate?
Show answer
GDPR (General Data Protection Regulation) regulates the collection, processing, and protection of personal data of European Union residents.- What is HIPAA?
Show answer
HIPAA (Health Insurance Portability and Accountability Act) is a U.S. regulation that protects the privacy and security of healthcare information.- What does PCI DSS require?
Show answer
PCI DSS (Payment Card Industry Data Security Standard) requires organizations that handle credit card data to implement security controls and maintain compliance.
FlashKeepers