AI Bot
Security Foundations, Controls, and Cryptography Flashcards
CompTIA Security+ SY0-801 (V8) Flashcards
Study our Security Foundations, Controls, and Cryptography flashcards for the CompTIA Security+ SY0-801 (V8) exam with 40+ flashcards. View as flashcards, a searchable table, or as a fun matching game.
| Front | Back |
| AES | Advanced Encryption Standard; symmetric block cipher supporting 128-bit or 192-bit or 256-bit keys. |
| Allow list | List of explicitly permitted items; unlisted items are denied within its scope. |
| Application restart | Closing and relaunching an application to load updated code or settings. |
| Assume breach | Zero Trust principle that designs defenses as though an attacker may already be inside the environment. |
| Asymmetric encryption key direction | Encrypt with the recipient's public key; decrypt with the corresponding private key. |
| Certificate revocation | Invalidation of a certificate before its scheduled expiration; commonly required after private-key compromise. |
| Change ownership | Assigned accountability for ensuring a change follows approved processes through completion. |
| Change stakeholders | People or groups affected by a change or involved in its approval and implementation. |
| Collision resistance | Difficulty of finding any two distinct inputs that produce the same hash digest. |
| Configuration baseline | Approved configuration used as a reference for controlling changes and detecting deviations. |
| Continuous verification | Reevaluate access throughout a session as identity or device posture or other risk signals change. |
| Database encryption | Protects stored database data; database-wide encryption does not replace database access controls. |
| Deny list | List of explicitly blocked items; unlisted items are not blocked by that list alone. |
| Diffie-Hellman | Key-agreement method for deriving a shared secret over an untrusted channel; basic Diffie-Hellman does not authenticate participants. |
| Downtime | Period when a system or service is unavailable; changes may create planned or unplanned downtime. |
| ECC | Elliptic curve cryptography; provides comparable classical security to RSA with much shorter keys. |
| Environmental controls | Safeguards against environmental hazards; examples include cooling and fire suppression. |
| Forward secrecy | Prevents later compromise of long-term private keys from exposing past session keys. |
| Hash collision | Two different inputs producing the same hash digest. |
| HSM | Hardware Security Module; safeguards keys and performs cryptographic operations within a protected hardware boundary. |
| Intermediate CA | Certificate authority between a trust anchor and an end-entity certificate in a certification path. |
| Key agreement | Participants contribute information to derive shared keying material without transmitting the resulting secret key. |
| KMS | Key management system; manages cryptographic keys throughout their life cycle from generation through secure destruction. |
| Legacy application compatibility | Security changes can disrupt older software that relies on outdated components or protocols. |
| OpenSSL | Cryptographic toolkit for generating keys and certificate requests plus inspecting certificates and testing TLS connections. |
| Partition encryption | Encrypts a selected disk partition rather than the entire physical drive. |
| Physical controls | Safeguards protecting facilities and equipment against unauthorized physical access or damage; examples include locks and fences. |
| Post-implementation validation | Confirming that an implemented change works correctly and leaves required security controls effective. |
| Record-level encryption | Encrypts individual database records rather than the entire database as a single unit. |
| Restricted change activities | Limits on who may modify systems and what changes they may perform. |
| RSA | Rivest-Shamir-Adleman; asymmetric algorithm used for encryption and digital signatures. |
| SAN | Subject Alternative Name; certificate extension containing identities such as DNS names or IP addresses. |
| Service restart | Stopping and starting a background service to apply changes; dependent functions may be temporarily interrupted. |
| SHA-256 | Secure Hash Algorithm with 256-bit output; a member of the SHA-2 family. |
| SOP | Standard operating procedure; documented steps for performing a recurring task consistently. |
| Third-party certificate | Certificate signed by an independent certificate authority; client trust still requires an accepted certification path. |
| TLS | Transport Layer Security; protects network communications against eavesdropping and tampering. |
| TPM | Trusted Platform Module; protects cryptographic keys and supports platform integrity measurements. |
| Verify explicitly | Zero Trust principle requiring access decisions based on verified identity and contextual signals rather than assumed trust. |
| Volume encryption | Encrypts a logical storage volume that may span one or more disk partitions. |
Related Study Materials
About the Flashcards
Flashcards for the CompTIA Security+ exam help students review security concepts tied to Zero Trust, access decisions, and continuous verification. The deck also covers physical and environmental safeguards, including facility protection, equipment protection, cooling, and fire suppression, with emphasis on recognizing terminology and applying the right control type.
Students can use these cards to reinforce change management vocabulary, configuration baselines, approved and restricted change activities, downtime, restarts, compatibility concerns, and post-implementation validation. The deck also reviews cryptography concepts such as encryption scopes, key agreement, AES, RSA, ECC, SHA-256, TLS, certificate authorities, revocation, TPMs, HSMs, key management systems, and OpenSSL.
Topics covered in this flashcard deck:
- Zero Trust principles
- Physical security controls
- Change management terms
- Encryption and hashing
- TLS and certificates
- Key management tools