CompTIA CySA+ complete index with explanation

persistent XSS

An XSS attack in which the hacker stores the user input on the target server, such as in a database, in a message forum, a visitor log, a comment field, and so forth, and then a victim is able to retrieve the stored data from the web application without that data being made safe to render in the browser. Also called a stored or Type I attack.

personal health information (PHI)

The medical records of individuals; also referred to as protected health information.

Personal Information Protection and Electronic Documents Act (PIPEDA)

Affects how private-sector organizations collect, use, and disclose personal information in the course of commercial business in Canada.

personally identifiable information (PII)

Any piece of data that can be used alone or with other information to identify a single person.

phishing

A social engineering attack in which attackers try to learn personal information, including credit card information and financial data.

physical control

A type of control that is implemented to protect an organization’s facilities and personnel.

ping sweep

A scan that uses ICMP to identify all live hosts by pinging all IP addresses in the known network.

piping

The process of sending the output of one function to another function as its input.

Platform as a Service (PaaS)

Cloud service model in which the vendor provides the hardware platform or data center and the software running on the platform, including the operating systems and infrastructure software.

Point-to-Point Tunneling Protocol (PPTP)

Microsoft protocol based on PPP that uses built-in Microsoft Point-to-Point encryption and can use a number of authentication methods, including CHAP, MS-CHAP, and EAP-TLS.

policy decision point (PDP)

An entity that retrieves all applicable polices in XACML and compares the request with the policies.

policy enforcement point (PEP)

An entity that protects the resource that the subject (a user or an application) is attempting to access in XACML.

port scan

A scan that attempts to connect to every port on each device and report which ports are open, or “listening.”

port security

Allows you to keep a port enabled for legitimate devices while preventing its use by illegitimate devices.

preventative control

A type of control that prevents an attack from occurring.

privacy

Relates to rights to control the sharing and use of one’s personal information.

private cloud

A cloud deployment model in which a private organization implements a cloud in its internal enterprise, and that cloud is used by the organization’s employees and partners.

Privilege Escalation

The process of exploiting a bug or weakness in an operating system to allow a user to receive privileges to which she is not entitled.

Privileges Required (Pr)

A CVSS base metric that describes the authentication an attacker would need to get through to exploit the vulnerability.

Process Explorer

A Sysinternals tool that enables you to look at the graph that appears in Task Manager and identify what caused spikes in the past, which is not possible with Task Manager alone.