CompTIA CySA+ complete index with explanation

key stretching

Cryptographic technique that involves making a weak key stronger by increasing the time it takes to test each possible key.

kill chain

A model that describes the stages of an intrusion.

knowledge factor authentication

Authentication based on something committed to memory.

known threats

Threats of which we are aware.

KnTTools

A memory acquisition and analysis tool used with Windows systems.

Layer 2 Tunneling Protocol (L2TP)

Protocol that operates at Layer 2 of the OSI model. Like PPTP, L2TP can use various authentication mechanisms; however, L2TP does not provide any encryption. It is typically used with IPsec.

legacy systems

Older systems that may be less secure than newer systems.

legal hold

A legal requirement placed on an organization to maintain archived data for longer periods for legal proceedings.

lessons learned report

Lists and discusses what was learned about how and why the incident occurred and how to prevent it from occurring again.

logic bomb

Type of malware that executes when a particular event takes place.

LonWorks/LonTalk3

Peer-to-peer protocol used in building automation; uses port 1679.

machine learning

Capability of software to gather information and make conclusions.

maintenance hook

A backdoor account created by programmers to give someone full permissions in a particular application or operating system.

management plane

Network architecture plane that administers the router.

managerial (administrative type) controls

A type of control that is implemented to administer the organization’s assets and personnel and includes security policies, procedures, standards, baselines, and guidelines that are established by management.

mandatory access control (MAC)

Authentication system in which authorization is based on security labels.

man-in-the-middle attack

An attack that intercepts legitimate traffic between two entities.

mantrap

A physical access control system that consists of a series of two doors with a small room between them. The user is authenticated at the first door and then allowed into the room. At that point, additional verification occurs.

maturity models

Process models developed to help develop security skills.

maximum tolerable downtime (MTD)

The maximum amount of time that an organization can tolerate a single resource or function being down.