Comptia A+ 1102, but specifically the things that I need to review

an extension to the Terminal Access Controller Access Control System and was developed as a proprietary protocol by Cisco.

Remote Authentication Dial-In User Service is a networking protocol that operates on port 1812 and provides centralized Authentication, Authorization, and Accounting management for users who connect and use a network service, but Cisco did not develop it.

is a network authentication protocol designed to provide strong mutual authentication for client/server applications using secret-key cryptography developed by MIT.

Challenge-Handshake Authentication Protocol is used to authenticate a user or network host to an authenticating entity. It is an authentication protocol but does not provide authorization or accounting services.

used when assigning permissions and rights, as it is more efficient to assign permissions to a group than to assign them individually to each user. you can assign permissions to a user simply by adding that user to the appropriate group.

shows a log of application and system messages, including errors, information messages, and warnings. it is a useful tool for troubleshooting all kinds of different Windows problems.

contains information regarding audit data data and security on a system. for example, it will contain a list of every successful and failed login attempt. the file is stored in %System Root%\System32\Winevt\Logs\ folder and can be opened using the Event Viewer.

contains information regarding application errors. stored in the %System Root%\System32\Winevt\Logs\ folder and can be opened using the Event Viewer.

contains a record of the events generated during the Windows installation or upgrade process. stored in the %System Root%\System32\Winevt\Logs\ folder and can be opened using the Event Viewer.

contains information about service load failures, hardware conflicts, driver load failures, and more. stored in the %System Root%\System32\Winevt\Logs\ folder and can be opened using the Event Viewer.

a self-replicating type of malware that does not require user intervention or another application to act as a host for it to replicate.

a type of malware that is hosted within another application, designed to appear harmless. AKA malware disguised as something benign.

takes advantage of VBA programming in Microsoft Office or other office type processing applications' macros. requires user intervention to run (i.e. by you clicking on the macro in an email attatchment or something).

a type of malware that, when executed (typically by accident), replicates itself by modifying other computer programs and inserting its own code into those programs.

a type of malware that secretly observes the computer user’s activities without permission and reports it to the software’s author.

a form of malware that provides the attacker with administrator privileges on the infected system, also known as “root” access. typically, it is also designed to stay hidden from the user, other software on the system, and the operating system itself.

(Formerly called a Demilitarized Zone or DMZ), this is a portion of a private network connected to the Internet and protected against intrusion. Certain services may need to be made publicly accessible from the Internet (such as a web, email, or Minecraft server) and they should be installed in this network instead of in your intranet. If communication is required between hosts on either side of this network, then a host within this network will act as a proxy to take the request.

an email-based or web-based form of phishing that targets senior executives or wealthy individuals.

the fraudulent practice of sending emails from a seemingly known or trusted sender to induce targeted individuals to reveal confidential information. This attack is focused on a targeted set of people, not just an indiscriminate large group of random people.

an email-based social engineering attack in which the attacker sends an email from a supposedly reputable source, such as a bank, to try to elicit private information from the victim

a social-engineering attack where the attacker extracts information while speaking over the phone or leveraging IP-based voice messaging services (VoIP).

a contactless card that usually utilizes RFID to communicate with the reader on a physical access system. These are commonly used to access secured rooms (such as server rooms) or even a building itself (such as at an access control vestibule).

An HMAC-based one-time password is a one-time password algorithm based on hash-based message authentication codes.

A Time-based one-time password is a computer algorithm that generates a one-time password that uses the current time as a source of uniqueness.

The process of generating a file from a complete copy of a file created at some past time and one or more incremental copies created at later times. The expression in this context refers to the fact that the assembled file is not a direct copy of any single current or previously created file. Instead, the file is merged by a specialized application program from the original file and one or more modifications to it.

Creates a copy of all the selected data regardless of when it was previously backed up. It takes the most time to complete a backup but is the fastest when conducting a restoral of all the data on a hard drive.

Creates a copy of the selected data that has been modified since the last full backup. It is a good compromise in speed between a full backup (which takes the longest to backup and the least to restore) and an incremental backup (which takes the least to backup and the longest to restore).

Creates a copy of new files and files modified since the last full, incremental, or differential backup. Therefore, it takes the least amount of time to complete a backup. Unfortunately, it also takes the most time to restore since you have to first restore the full backup, then any differential and incremental backups until all your data is restored.

A physical locking mechanism installed on a server cabinet to prevent unauthorized from accessing the servers. It could be a cipher lock, biometric lock, or a simple keyed lock depending on the level of security needed.

An administrative control used to log each person who enters or leaves a secure room.

The concept and practice of restricting access rights for users, accounts, and computing processes to only those resources absolutely required to perform routine, legitimate activities. The words refer to the authorization to bypass certain security restraints.

The security framework that requires all users, whether in or outside of the organization's network, to be authenticated, authorized, and continuously validated for security configuration and posture before being granted or keeping access to applications and data.

An approach to cybersecurity in which a series of defensive mechanisms are layered to protect valuable data and information.

A set of rules applied by the owner, creator, or administrator of a network, website, or service, that restrict how the network, website, or system may be used and sets guidelines as to how it should be used.

The malicious practice of injecting the attacker into the conversation path between two parties. It's the act of disguising a communication from an unknown source as being from a known, trusted source.

An attack where the attacker secretly relays and possibly alters the communcations between two parties who believe they are directly communicating with each other. The attacker makes independent connections with the victims and relays messages between them to make them believe they are talking directly to each other over a private connection. The attacker will then intercept all relevant messages passing between the two victims and inject new ones.

A social engineering technique to gain access to a building by following someone unaware of their presence.

This type of data storage type stores a single character. Usually consumes only 1 byte (8 bits) of storage.

This stores a group of characters, and usually consumes as much storage as necessary. Each character in a string usually requires 1 byte of storage.

Stores a whole number, such as 21, 43, or 1024. An integer data type usually consumes 8 bytes of storage.

An attack that entails injecting malicious scripts into otherwise benign and trusted websites. Generally focuses on exploiting a user's workstation, not a server.

The placement of malicious code in SQL statements via webpage input. Commonly used against databases, but are not useful when attacking file servers.

A type of social engineering attack that redirects a request for a website, typically an e-commerce site, to a similar-looking but fake website. The attacker uses DNS spoofing to redirect the user to the fake site.

An attack involving manipulating DNS records to redirect users toward a fraudulent, malicious website that may resemble the user's intended destination.

A form of malicious software and internet fraud that misleads users into believing there is a virus on their computer and to pay money for a fake malware removal tool (that actually introduces malware to the computer). It is a form of scareware that manipulates users through fear and a form of ransomware.

The Wired Equivalent Privacy encryption system is based on the RC4 encryption cipher. It uses a 40-bit encryption key and a 24-bit initialization vector by default, creating a 64-bit key. It is considered weak by today's standarsd and should be replaced by WPA2 or other strong encryption schemes.

Wi-Fi Protected Access is an improved encryption scheme for protecting Wi-Fi communications designed to replace WEP. IT uses the RC4 cipher and a temporal key integrity protocol (TKIP) to overcome the vulnerabilities in the older WEP protection scheme.

An improvement over Wi-Fi Protected Access, it features an improved method of key distribution and authentication for enterprise networks. It uses the improved AES cipher with counter mode with cipher-block chaining message authentication protocol (CCMP) for encryption.

Deviates from the initial program path to some sort of logic condition. Here, the computer repeats the task until a condition is met. Often implemented with For, For Next, While, or Do While statements.

When an algorithm makes a choice to do one of two (or more) things. The most common programming statements used to do this are "IF" and "ELSE".

The strategy where people can bring their own devices into the corporate network. Not very secure, because they can contain vulnerabilties that could be allowed to roam free on a corporate network.

Means that the company provides the users with a smartphone primarily for work use, but basic functions such as voice calls, messaging, and personal applications are allowed, with some controls on usage and flexibility.

Here, the user can choose which device they wish to use from a small selection of devices used by the company. The company then buys, procures, and secures the device for the user.

Simultaneous Authentication of Equals is a password-based authentication and password-authenticated key agreement method used in WPA3 that replaced the 4-way handshake used in WPA-based wireless networks. Also known as the dragonfly handshake.

A feature of WPA3, allows encryption for traffic being sent and received over a wireless network while still using open authentication.

A high-performance mode of operation for symmetric encryption that supports authenticated encryption with associated data (AEAD). Management protection frames protect unicast and multicast management action frames to protect against eavesdropping and forgery in a WPA3-based wireless network.

A type of antivirus scan where the AV software intercepts operating system calls to open files to scan the file before allowing or preventing the file from being opened. They reduce performance, but are essential for maintaining effective protectionagainst malware.

This refers to a security posture where the system will only allow an item to traverse the firewall if the traffic matches an existing rules.

This refers to a security posture where the system will allow all traffic to traverse the firewall unless there is a specific rule to prevent it.

A partition that can be divided into additional logical drives. Unlike a primary partition, you don't need to assign it a drive letter and install a file system.

Happens when an employee moves between roles in an organization and keeps the access or permissions of the previous role.

List of IP addresses, ports, or applications that are not allowed to be run or used on a given system.

A method employed by many computer anti-virus programs to detect previously unknown computer viruses and new variants of viruses already in the wild. This is behavior-based detection and prevention, so it should detect the issue and stop it from spreading.

An inflexible, step-by-step listing of the actions that must be completed for any given task.

A document that contains information on the potential hazards (health, fire, reactivity, and enviornmental) and how to work safely with the chemical product.

A document stipulating constraints and practices that a user must agree to for access to a corporate network or the internet.

Document that outlines all the work that is to be performed, as well as the agreed-upon deliverables and timelines.

A network service provided by a router or proxy server to map private local addresses to one or more publicly accessible IP addresses.

Used to identify the host identifier and the network identifier uniquely in combination with the IP address. It is used by the TCP/IP protocol to determine whether a host is on the local subnet or a remote network.

This parameter is the IP address of a router to which packets destined for a remote network should be sent by default. This setting is not required, but if you do not have one included, your network traffic can never leave the local area network.

This is basically an increase in your electrical current. It often has levels of 10-30% above the normal line voltage and lasts from 15 milliseconds up to several minutes.

A very short pulse of energy on a power line. These can contain very high voltages up to and beyond 6000 volts but usually last only a few milliseconds instead of longer but lower voltage conditions of another name.

A reduction in or restriction on the availability of electrical power in a particular area. The irregular power supply during such an event can ruin your computer and other electronic devices.