Security+ Terms

CIA Triad

Confidentiality, Integrity, Availability

AAA

Authentication, Authorization, Accounting

CA

Certificate Authority

NAT

Network Address Translation / Translators

IP

Internet Protocol

PEP

Policy Enforcement Point

PDP

Policy Decision Point

API

Application Programming Interface

OS

Operating System

PKI

Public Key Infrastructure

SSD

Solid State Drive

USB

Universal Serial Bus

EFS

Encrypting File System

VPN

Virtual Private Network

SSL

Secure Sockets Layer (legacy web security protocol)

TLS

Transport Layer Security (current standard web security protocol)

IPsec

Internet Protocol Security

TPM

Trusted Platform Module

HSM

Hardware Security Module

PII

Personally Identifiable Information

CSR

Certificate Signing Request

DNS

Domain Name System

CRL

Certificate Revocation List

OCSP

Online Certificate Status Protocol

APT

Advanced Persistent Threat

DDoS

Distributed Denial of Service

WEP

Wired Equivalent Privacy (outdated wireless protocol)

WPA

Wi-Fi Protected Access

TCP

Transmission Control Protocol

UDP

User Datagram Protocol

MSP

Managed Service Provider

IPS

Intrusion Prevention System

IDS

Intrusion Detection System

DLL

Dynamic Link Library

XSS

Cross-Site Scripting

EOL

End of Life

EOSL

End of Service Life

VM

Virtual Machine

RCE

Remote Code Execution

FTP

File Transfer Protocol

IoT

Internet of Things

PHI

Protected Health Information

IM

Instant Messaging

UEFI

Unified Extensible Firmware Interface

BIOS

Basic Input/Output System

RFID

Radio Frequency Identification

CC

Credit Card

MFA

Multifactor Authentication

STP

Spanning Tree Protocol

ICMP

Internet Control Message Protocol

NTP

Network Time Protocol

RF

Radio Frequency

ARP

Address Resolution Protocol

ASLR

Address Space Layout Randomization

CSRF

Cross-Site Request Forgery

PCI DSS

Payment Card Industry Data Security Standard

SIEM

Security Information and Event Management

EDR

Endpoint Detection and Response

IaaS

Infrastructure as a Service

PaaS

Platform as a Service

SaaS

Software as a Service

FaaS

Function as a Service

IaC

Infrastructure as Code

VLAN

Virtual Local Area Network

SDN

Software-Defined Networking

SCADA

Supervisory Control and Data Acquisition

ICS

Industrial Control System

RTOS

Real-Time Operating System

HA

High Availability

MTTR

Mean Time To Repair

UPS

Uninterruptible Power Supply

EAP

Extensible Authentication Protocol

NGFW

Next-Generation Firewall

UTM

Unified Threat Management

CSU / DSU

Channel Service Unit / Data Service Unit

WAF

Web Application Firewall

SD-WAN

Software-Defined Wide Area Network

SASE

Secure Access Service Edge

NDA

Non-Disclosure Agreement

COOP

Continuity of Operations Planning

MDM

Mobile Device Management

BYOD

Bring Your Own Device

COPE

Corporate-Owned, Personally Enabled

CYOD

Choose Your Own Device

MIC

Message Integrity Check

DES

Data Encryption Standard

AES

Advanced Encryption Standard

SAE

Simultaneous Authentication of Equals

PSK

Pre-Shared Key

RADIUS

Remote Authentication Dial-In User Service

NAC

Network Access Control

SAST

Static Application Security Testing

OSINT

Open Source Intelligence

CVSS

Common Vulnerability Scoring System

SCAP

Security Content Automation Protocol

DLP

Data Loss Prevention

SNMP

Simple Network Management Protocol

MIB

Management Information Base

ACL

Access Control List

AD

Active Directory