CompTIA Security+ Section 19

What are default passwords?

Factory-set credentials that should be changed immediately.

What are unneeded ports and protocols?

Unused communication methods that should be disabled.

What are extra open ports?

Unnecessary network openings that increase attack surface.

What is least functionality?

Only enabling features and services required for tasks.

What is a secure baseline?

Approved configuration used as a standard for systems.

What is a baseline image?

Pre-configured system setup used for secure deployment.

What is configuration management?

Process of maintaining secure system settings.

What is application allowlisting?

Only approved apps can run on the system.

What is application blocklisting?

Blocks known malicious or unapproved apps.

What are trusted operating systems?

Systems designed and verified for high security.

What is SELinux?

Security-Enhanced Linux that enforces mandatory access control.

What is patch management?

Process of keeping systems updated and secure.

What is a hotfix?

A small update that fixes a specific issue quickly.

What is group policy?

Centralized management of user and computer settings in Windows.

What is a security template?

Predefined security settings for configuration enforcement.

What is full disk encryption?

Encrypts an entire drive to protect stored data.

What is volume encryption?

Encrypts specific storage volumes.

What is file-level encryption?

Encrypts individual files.

What is database encryption?

Encrypts stored database contents for protection.