CompTIA CySA+ complete index with explanation

overflow attack

Occurs when an area of memory of some sort is full and can hold no more information.

OWASP Zed Attack Proxy (ZAP)

An application that stands between the web server and the client and passes all requests and responses back and forth, while analyzing the information to test the security of the web application.

ownership factor authentication

Authentication based on something in your possession.

packet analysis

Analysis that examines an entire packet, including the payload.

Pacu

An exploit framework used to assess and attack Amazon Web Services (AWS) cloud environments.

parameterized queries

Queries that do not require input values or parameters.

passive enumeration

The technique of capturing traffic and making educated assumptions from the traffic.

passive vulnerability scanner

A type of scanner that cannot take action to block an attack, such as block a dangerous IP address.

passphrase password

A type of password that uses a long phrase. Because of the password’s length, it is easier to remember but much harder to attack.

password complexity

How the password will be structured.

password history

How long before a password can be reused.

password length

How long the password must be.

password life

How long a password will be valid.

password spraying

A technique used to identify the passwords of domain users. Rather than targeting a single account as in a brute-force attack, it targets or “sprays” multiple accounts with the same password attempt.

patching

Applying updates that fix security or functional issues.

patent

A right granted to an individual or a company to protect the rights to an invention.

Payment Card Industry Data Security Standard (PCI DSS)

Standard that affects any organizations that handle cardholder information for the major credit card companies.

peer-to-peer botnet

A botnet in which devices that can be reached externally are compromised and run server software that turns them into command and control servers for the devices that are recruited internally that cannot communicate with the command and control server operating externally.

Perl

A scripting language found on all Linux servers. It helps in text manipulation tasks.

permissions

Access rights granted or denied at the file, folder, or other object level.