CompTIA A+ 220-1202 Security and Troubleshooting - 8th Set of Videos

FDE (Full Disk Encryption)

Encrypts everything stored on a drive to protect data-at-rest (e.g., BitLocker on Windows).

Password Entropy

A measure of how unpredictable a password is; higher entropy makes it harder to crack.

BIOS/UEFI Supervisor Password

Prevents unauthorized changes to BIOS settings.

BIOS/UEFI User Password

Required during startup before the operating system can load.

Least Privilege Principle

Assigning only the minimum rights and permissions a user needs to perform their job.

Account Lockout Threshold

Locks an account or requires extra authentication after a defined number of failed login attempts.

Autorun vs. Autoplay

Autorun automatically executes files (removed for security); Autoplay focuses on media, prompting action.

iOS Encryption Default

All personal data is encrypted by default, using the passcode as the decryption key.

Mobile Device Management (MDM)

A system used to centrally manage, configure, and secure mobile devices in an organization.

Degausser

Uses a powerful magnet to erase magnetic HDDs; ineffective on SSDs and flash memory.

Quick Format vs. Standard Format

Quick clears only the file index; Standard overwrites all data sectors, making recovery impossible.

Certificate of Destruction

A formal document from a third party confirming a storage drive was securely destroyed.

UPnP (Universal Plug and Play) Security Risk

Allows local applications to automatically open inbound firewall ports without administrator approval.

DMZ (Demilitarized Zone)

A separate network segment for public-facing services, isolating them from the private internal network.

WPA2/WPA3 Enterprise (802.1X)

Wireless authentication where each user has unique credentials verified against a central directory.

Port Forwarding

Statically translates a public IP and port to a private internal IP and port.

Browser Hash Verification

Running a SHA-256 algorithm on a downloaded browser file to verify it matches the developer's hash.

Private/Incognito Browsing Mode

Prevents local storage of history, cache, and cookies, but does not provide online anonymity.

Explicit vs. Transparent Proxy

Explicit requires manual browser/OS configuration; Transparent intercepts traffic automatically with no client setup.

DoH (DNS over HTTPS)

Encrypts DNS queries using HTTPS to prevent third-party snooping of visited websites.

BSOD (Blue Screen of Death)

A Windows stop error indicating a severe system crash, providing a troubleshooting stop code.

BCD (Boot Configuration Database)

The modern Windows registry file storing startup parameters; rebuilt using 'bootrec /rebuildbcd'.

Reliability Monitor

A Windows tool tracking application stability and crashes over time, linking directly to Event Viewer.

Virtual Memory (Paging File)

Disk space used by Windows to temporarily hold inactive RAM contents when memory runs low.

Universal Mobile Troubleshooting Step

Restarting the device, which clears RAM, resets wireless radios, and stops pending processes.

AirDrop Requirements (iOS)

Requires both Wi-Fi and Bluetooth to be enabled simultaneously on nearby devices.