CompTIA Security+

Complex attacks that are difficult to detect and thwart. Sophisticated attacks use common interne...

A wide variety of attack tools that are freely available on the Internet, making any reasonably k...

Modern attacks spread very quickly, up to millions of computers in a matter of minutes or even da...

We need to create profiles of the different types of attacks we see. Historically, cybersecurity ...

What are the most common methods attackers use to conduct an exploit? Attack Strategy Descript...

What are the common methods organizations use to defend their systems from attacks? Methodolog...

All the points at which a malicious actor could try to exploit a vulnerability. Any location or m...

Use Loki's tactics to convince unsuspecting users to provide sensitive data or to violate securit...

Software that serves a malicious purpose, typically installed without the user's consent (or know...

The process of writing or solving messages using a secret code. This would be the proper definit...

Where encryption and decryption are handled by two different keys. A user will generate a keypai...

A symmetric encryption method that encrypts data one bit at a time. The stream cipher is based o...

A symmetric encryption algorithm that encrypts data in set chunks, with varying chunk sizes. Com...

A unique and increasingly popular implementation of cryptography that was developed in 2008. Blo...

There is no such thing as a sure thing when it comes to protecting data stored on computer system...

An encryption tool that encrypts emails, digitally signs them, and also encrypts documents. GPG ...

The usage of plastic cards (similar to credit cards) to store and use encrypted authentication in...

Manage group accounts and group membership in the Linux operating system. Command Functio...

The notion that a network needs to be accessible to more than just a well-defined group of employ...

How can devices connect to a network that has a robust access control configuration? NAC doesn't...

A terribly complicated four-step process that requires forethought when implementing network acce...

Learn what to look out for when hardening a switch.  

Lock the aliens out! Physical security is the first line of defense when it comes to physical ac...

Spy on the infidels!  The goal of monitoring is to keep track of conditions on the network, iden...

add one proton, electron, or neutron to every atom in your body? You need to: patch outdated ...

who is the single guy from pyeongyang, north korea on steam Generally Good Ideas Look for: o...

Software designed to manage security data inputs and provide reporting and alerting. The core fu...

We need to make sure the REAL Epstein files don't leak. DLP automates the discovery and classifi...

There are a variety of options at your disposal. Choose the method based on the use/purpose of t...

There are lots of them. In fact, here's a list of them. Privilege Escalation Pointer/object ...

The most widely used software development model. Waterfall requires each step to be fully comple...

A more agile approach to software development. Agile depicts software development as a never end...

A security mechanism used in software development used to isolate running processes from each oth...

The process of scrutinizing source code to identify potential problems and non-compliant coding p...

We must protect our code from getting skidded! Thou shalt release an application that is globall...

Pay Microsoft and promise your code is safe and secure and totally isn't spyware or adware. Code...

Cookies are small pieces of data stored on a computer by a web browser while accessing a website....

lock them in a white room. Smart devices are popular, but they are a black box. The consumer usu...

who even still uses email anyway Email is cleartext by default. However, S/MIME and PGP are used...

who in tel aviv can i blame for all my problems Governance practices ensure organizations abide ...

role-based access control redux Role Description Role Owner A senior (...

just don't get third partied uhhh third parties are sometimes good and sometimes bad. choose the...

the parameters and expectations for third-party relationships we need to expect a certain level ...

how do we know which third-party vendors to do business with? uhhh just do a bunch of stuff on t...