Flashcards · CompTIA Security+ · Free
CompTIA Security+ flashcards, generated for you.
Example CompTIA Security+ study cards to learn from right now — then generate a full set from your own notes (plus a practice quiz) and export to Quizlet or Anki. Free, no account needed.
Example CompTIA Security+ flashcards
What is the primary purpose of the CIA triad in information security?
The CIA triad (Confidentiality, Integrity, Availability) provides a framework for evaluating and implementing security controls to protect information assets and ensure secure operations.
Define confidentiality in the context of security controls.
Confidentiality ensures that information is accessible only to authorized individuals and is protected from unauthorized disclosure or access.
What does non-repudiation provide in a security context?
Non-repudiation ensures that a party cannot deny performing an action or transaction; it provides proof of origin and delivery using mechanisms like digital signatures.
Explain the difference between symmetric and asymmetric encryption.
Symmetric encryption uses a single shared key for both encryption and decryption; asymmetric encryption uses a public key for encryption and a private key for decryption.
What is a hash function's primary security property?
A hash function produces a fixed-size output (digest) from any input where even tiny input changes produce completely different outputs; it is deterministic, one-way, and collision-resistant.
What is the purpose of a digital signature?
A digital signature provides authentication, non-repudiation, and integrity verification by encrypting a hash of a message with the sender's private key.
Define the principle of least privilege.
Least privilege grants users, processes, and systems only the minimum access rights and permissions necessary to perform their required functions.
What is the difference between discretionary access control (DAC) and mandatory access control (MAC)?
DAC allows resource owners to grant or deny access based on their discretion; MAC enforces access control based on security labels and system-wide policies that users cannot override.
What is the purpose of multi-factor authentication (MFA)?
MFA requires users to provide two or more different types of authentication factors (something you know, have, are, do, or where you are) to verify identity and increase security.
Describe the difference between identification, authentication, and authorization.
Identification claims who you are (username); authentication verifies that claim (password/MFA); authorization determines what you are allowed to access based on verified identity.
Make your own CompTIA Security+ study set
Flashcards for related topics
Studying CompTIA Security+ to build with AI? MindloomHQ turns it into real skills — structured courses, agent projects, and certificates.
Explore MindloomHQ →