CompTIA Security+ (SY0-701) - Security Fundamentals Flashcards

Question 1

CIA Triad

Accepted Answer

The foundational model of information security consisting of **Confidentiality** (protecting data from unauthorized access), **Integrity** (ensuring data remains unaltered and accurate), and **Availability** (ensuring timely and reliable access to data for authorized users).

Question 2

Non-Repudiation

Accepted Answer

A security goal ensuring that a party to a contract or communication cannot deny the authenticity of their signature on a document or the sending of a message that they originated. Achieved using **digital signatures** and asymmetric encryption.

Question 3

Zero Trust Architecture (ZTA)

Accepted Answer

A cybersecurity strategy built on the principle of **'Never trust, always verify.'** It requires strict identity verification and continuous authorization for every user and device attempting to access network resources, regardless of location.

Question 4

Phishing vs. Spear Phishing vs. Whaling

Accepted Answer

- **Phishing**: Broad, untargeted emails sent to trick victims into revealing sensitive info.
- **Spear Phishing**: Targeted attack directed at specific individuals or organizations using customized context.
- **Whaling**: High-profile spear phishing aimed at executives or key decision-makers (`CEOs`, `CFOs`).

Question 5

Vishing vs. Smishing

Accepted Answer

- **Vishing (Voice Phishing)**: Social engineering performed via telephone or VoIP calls.
- **Smishing (SMS Phishing)**: Social engineering executed through fraudulent text messages containing malicious links or requests.

Question 6

Tailgating vs. Piggybacking

Accepted Answer

- **Tailgating**: An unauthorized individual physically follows an authorized person into a secure area without their knowledge.
- **Piggybacking**: An unauthorized person enters a secure area with the explicit consent/knowledge of an authorized individual (e.g., holding the door out of courtesy).

Question 7

Symmetric Encryption

Accepted Answer

An encryption method that uses a **single shared key** for both encryption and decryption. Fast and efficient for large datasets (e.g., `AES-256`, `3DES`). Key distribution is its primary challenge.

Question 8

Asymmetric Encryption

Accepted Answer

An encryption method that uses a **key pair**: a **Public Key** (for encryption/verification) and a **Private Key** (for decryption/signing). Solves key exchange issues but is computationally slower (e.g., `RSA`, `ECC`).

Question 9

Hashing Function

Accepted Answer

A one-way mathematical algorithm that converts input data of any size into a fixed-length string (hash). Guarantees **integrity**. Examples include `SHA-256` and `MD5`. Any change in input drastically changes the output hash (avalanche effect).

Question 10

Digital Signature Generation & Verification

Accepted Answer

1. **Sender** creates a hash of the message and encrypts the hash with their **Private Key**.
2. **Recipient** decrypts the hash using the sender's **Public Key** and compares it to a freshly calculated hash of the received message to prove **authenticity, integrity, and non-repudiation**.

Question 11

Public Key Infrastructure (PKI)

Accepted Answer

A framework consisting of hardware, software, policies, and procedures needed to create, manage, distribute, use, store, and revoke digital certificates and manage public-key encryption.

Question 12

Certificate Authority (CA) & Registration Authority (RA)

Accepted Answer

- **Certificate Authority (CA)**: A trusted third-party entity that issues and signs digital certificates.
- **Registration Authority (RA)**: Verifies the identity of entities requesting digital certificates before the CA issues them.

Question 13

CRL vs. OCSP

Accepted Answer

- **CRL (Certificate Revocation List)**: A periodically published, downloadable list of revoked certificates.
- **OCSP (Online Certificate Status Protocol)**: A real-time protocol that queries a certificate status directly, offering faster, lower-bandwidth revocation checks.

Question 14

Perfect Forward Secrecy (PFS)

Accepted Answer

A cryptographic feature using ephemeral session keys. Ensures that even if a server's long-term private key is compromised in the future, past encrypted communications cannot be decrypted.

Question 15

Multi-Factor Authentication (MFA) Factors

Accepted Answer

Authentication requiring two or more distinct factors:
1. **Something you know** (Password, PIN)
2. **Something you have** (Hardware token, Smartphone app)
3. **Something you are** (Biometrics: fingerprint, iris)
4. **Somewhere you are** (GPS location, IP subnet)
5. **Something you do** (Keystroke dynamics, gesture)

Question 16

Role-Based Access Control (RBAC)

Accepted Answer

An access control model where permissions are assigned to specific **roles** or job functions within an organization, and users are assigned to those roles. Simplifies privilege management.

Question 17

Attribute-Based Access Control (ABAC)

Accepted Answer

A dynamic access control model that evaluates rules and policies based on **attributes** of the subject (e.g., clearance level), resource (e.g., sensitivity), and environment (e.g., time of day, location).

Question 18

SIEM (Security Information and Event Management)

Accepted Answer

A centralized security system that aggregates, normalizes, and correlates log data from across an enterprise network to provide real-time monitoring, threat detection, and event analysis.

Question 19

SOAR (Security Orchestration, Automation, and Response)

Accepted Answer

A technology stack that enables organizations to collect security threat data and automate threat response workflows using pre-configured **playbooks** and integrated security tools.

Question 20

Incident Response Lifecycle Steps

Accepted Answer

1. **Preparation**: Building tools, policies, and training.
2. **Detection & Analysis**: Identifying potential incidents and determining scope.
3. **Containment**: Isolating affected systems to prevent spread.
4. **Eradication**: Removing threat actors and root causes.
5. **Recovery**: Restoring systems safely back into production.
6. **Lessons Learned**: Post-incident analysis to improve future response.

CompTIA Security+ (SY0-701) - Security Fundamentals

Cards in this deck

Related Flashcard Sets

JLPT N4 - Grammar Patterns & Kanji

German B1 - Intermediate Grammar & Vocabulary

Kubernetes Fundamentals & Orchestration

CFA Level I - Ethical and Professional Standards