CompTIA Security+ Exam Review (Chapters 1-4)

Vocabulary flashcards covering core security principles, threat actors, malware types, and social engineering attacks from CompTIA Security+ Chapters 1 through 4.

CIA Triad

A core cybersecurity model consisting of Confidentiality, Integrity, and Availability.

DAD Triad

A model representing the opposites of the CIA triad: Disclosure, Alteration, and Denial.

Managerial Controls

Security controls that govern the security processes employees follow, such as updating organization threat assessment processes.

Compliance Risk

Risk concerning sanctions, fines, or penalties for violating rules mandated by regulatory bodies, such as the PCI DSS.

Integrity

The cybersecurity objective of ensuring that data is protected from unauthorized changes or defacement.

Deterrent Controls

Security controls designed to discourage attackers from attempting to gain access, such as a Beware of Dog sign.

Network-Based DLP

Data loss prevention technology that scans network traffic for unencrypted sensitive data without requiring client-side agent installations.

Data in Transit

Data that is actively being transmitted between two systems over a network connection.

Technical Controls

Controls implemented through technology, such as firewalls, intrusion prevention systems, and encryption, to manage access to data.

Strategic Risk

Risk planning that considers potential threats to future organizational viability and continuity of business operations.

Control Objectives

Management-defined goals describing an organization's desired security state and what processes should prevent.

Data Encryption

Technology that utilizes mathematical algorithms to render information unreadable to anyone lacking the required key.

Preventive Controls

Security safeguards designed to stop unauthorized access before it happens, including firewalls and full-disk laptop encryption.

HIPAA

The Health Insurance Portability and Accountability Act of 1996; a U.S. regulation requiring the protection of Private Health Information.

Confidentiality

The cybersecurity objective ensuring that only authorized parties are permitted access to protected data.

Nonrepudiation

The concept ensuring that a sender cannot deny performing an action, such as sending a message, typically verified by signatures.

Tokenization

A reversible data protection technique that substitutes characters using a reference table so original data can be restored later.

Compensating Controls

Alternative security controls under PCI DSS that satisfy the original requirement's intent, rigor, and defense level.

Threat Intelligence Assessment Measures

The three primary metrics commonly used to evaluate threat intelligence: timeliness, accuracy, and relevance.

Hacktivist

An attacker motivated by political or philosophical beliefs who uses computer attacks to advance a specific agenda.

Authorized Attacker

A penetration tester or white-hat hacker legally hired to gain system access to improve security rather than cause harm.

Advanced Persistent Threat (APT)

A sophisticated, resource-heavy threat actor, typically associated with nation-state attackers, that maintains prolonged presence on target networks.

ISACs

Information Sharing and Analysis Centers; non-profit entities created with U.S. government assistance to share sector-specific cyber threat knowledge.

Nation-State Actor

A cyber threat actor backed by a sovereign nation possessing the greatest access to national resources and operational capabilities.

Supply Chain Attack

An attack where an adversary compromises a third-party vendor or supplier of hardware, firmware, or software to breach customer networks.

Internet RFCs

Request for Comments; authoritative formal specification documents published by the IETF defining technical foundations such as TLS.

API Keys

Unique authentication codes identifying applications or users that, if exposed publicly, allow impersonation and unauthorized access.

Threat Map

A research tool that visually displays the geographic locations of cyber threat actors worldwide, often using honeypot data.

Indicators of Compromise (IoCs)

Shared forensic artifacts, such as malicious file hashes or domain names, used to identify whether a system has been compromised.

Shadow IT

Information technology systems, software, or cloud messaging applications utilized by personnel without authorization from the IT department.

Port Scanning

Active reconnaissance used to discover open ports and running applications on a host, distinct from passive OSINT.

OSINT

Open-source intelligence; lawful and passive information gathering from publicly available resources like WHOIS and DNS lookups.

Gray-Hat Hacker

An individual who identifies security flaws without proper authorization but without malicious intent to exploit the findings for personal gain.

Logic Bomb

Malicious code embedded by an insider that executes unauthorized instructions, such as deleting files, once specific conditions are met.

Rootkit

Stealthy malware that provides hidden administrative backdoor access while concealing its presence within operating system code.

Keylogger

Malicious software or hardware designed to capture keystrokes and other user input to harvest sensitive data like credentials.

Command and Control (C&C)

Communication channels through which threat actors remotely direct, update, and administer compromised systems or bots.

Backdoor

Software left on a computer that allows unauthorized remote access into a network or system without affecting normal operations.

Bloatware

Unwanted, pre-installed manufacturer software on new computers whose primary negative impact is consuming system resources.

Spyware

Malware deployed specifically to track and harvest information regarding a user's web browsing habits and device behavior.

Ransomware

Malicious software that encrypts system data and displays extortion demands, typically requesting Bitcoin for decryption.

Worm

A self-propagating malware program that spreads across networks by exploiting vulnerabilities without requiring user activation.

Virus

Malware that requires user activation, such as opening an infected file, to execute and spread across systems.

Trojan

Malware disguised as an innocuous, desirable application that releases a malicious payload upon installation.

Bot

Malware that connects to a command and control server to enable remote management, often aggregated into botnets for DoS attacks.

Phishing

A social engineering technique using deceptive emails and links to trick recipients into providing sensitive information.

Vishing

A phishing attack conducted over telephone voice calls or voicemail messages to harvest sensitive data.

Brute-Force Attack

An authentication attack that tests numerous combinations of usernames and passwords to gain unauthorized access.

Password Spraying

A brute-force variant that tests a single password or small list against many different usernames to bypass account lockouts.

Business Email Compromise (BEC)

A social engineering fraud using spoofed or compromised vendor email accounts to request payments to unauthorized accounts.

Watering Hole Attack

An attack where an adversary compromises websites known to be frequently visited by a target organization to infect their systems.

Pretexting

A social engineering attack in which the attacker creates an invented scenario or backstory to manipulate a target into sending assets or data.

Typosquatting

Registering domain names with common misspellings of popular sites to capture web traffic from users who mistype URLs.

Brand Impersonation

A deceptive technique in which attackers mimic the name, logo, and identity of a well-known company to establish false trust.

Smishing

A phishing attack delivered via Short Message Service (SMS) text messages to deceive targets.

Disinformation

Deliberately false or deceptive propaganda spread by threat actors, such as nation-states, to manipulate opinions and cause political discord.