CompTIA CySA+ complete index with explanation

Integrity (I)

CVSS base metric that describes the type of data alteration that might occur.

intellectual property

A tangible or intangible asset to which the owner has exclusive rights.

internal scan

A vulnerability scan performed from inside the organization’s network to assess the likelihood of an insider attack.

Internet Key Exchange (IKE)

An IPsec component that provides the authentication material used to create the keys exchanged by ISAKMP during peer authentication.

Internet of Things (IoT)

Refers to a system of interrelated computing devices, mechanical and digital machines, and objects that are provided with unique identifiers and the ability to transfer data over a network without requiring humanto- human or human-to-computer interaction.

Internet Protocol Security (IPsec)

A protocol that provides encryption, data integrity, and system-based authentication.

Internet Protocol Security (IPsec)

A suite of protocols used to create an encrypted connection.

Internet Security Association and Key Management Protocol (ISAKMP)

An IPsec component that handles the creation of a security association for the session and the exchange of keys.

intrusion detection system (IDS)

A system that creates a log of every security event that occurs.

intrusion prevention system (IPS)

A system that takes action when a security event occurs.

ISO/IEC 27000 Series

A family of security program development standards providing guidance on how to develop and maintain an information security management system (ISMS).

ISO/IEC 27001:2013

The latest version of the 27001 standard, one of the most popular standards by which organizations obtain certification for information security. It provides guidance on ensuring that an organization’s information security management system (ISMS) is properly built, established, maintained, and continually improved.

ISO/IEC 27002:2013

The latest version of the ISO/IEC 27002 standard that provides a code of practice for information security management.

isolation/sandboxing

Placing malware where it can be safely probed and analyzed.

ITIL

A process management development standard developed by the Office of Management and Budget in OMB Circular A-130.

Jailbreaking

Privilege escalation of an Apple device for the purpose of removing software restrictions imposed by Apple.

John the Ripper

Password cracker that can work in Unix/Linux as well as macOS.

jumpbox

A server that is used to access devices that have been placed in a secure network zone such as a DMZ.

kernel debugger

A debugger that operates at ring 0.

key escrow

The process of storing keys with a third party to ensure that decryption can occur. From the Library of Matthias Boeker Glossary of Key Terms 669