CompTIA CySA+ complete index with explanation

Common Vulnerability Scoring System (CVSS)

A system of ranking vulnerabilities that are discovered based on pre-defined metrics.

Common Weakness Enumeration (CWE)

SCAP component; an identification scheme for design flaws in the development of software that can lead to vulnerabilities.

Communications Assistance for Law Enforcement Act (CALEA) of 1994

Act that requires telecommunications carriers and manufacturers of telecommunications equipment to modify and design their equipment, facilities, and services to ensure that they have built-in surveillance capabilities.

community cloud

A cloud deployment model in which the cloud infrastructure is shared among several organizations from a specific group with common computing needs.

compensating control

A type of control that is applied to mitigate the impact or likelihood of an attack; also called a countermeasure.

complex password

A type of password that includes a mixture of upper- and lowercase letters, numbers, and special characters.

Computer Fraud and Abuse Act (CFAA)

Affects any entities that engage in hacking of “protected computers,” as defined in the act.

Computer Security Act of 1987

The first law to require a formal computer security plan. It was written to protect and defend the sensitive information in the federal government systems. Superseded in 2002 by the Federal Information Security Management Act (FISMA).

confidence level

In the context of intelligence sources, a description of the perceived integrity of any particular data.

Confidentiality (C)

CVSS base metric that describes the information disclosure that may occur if the vulnerability is exploited.

configuration baseline

A floor or minimum standard that is required.

configuration lockdown

Prevents any changes to the configuration of a device, even by users who formerly had the right to configure the device.

containerization

Server virtualization technique in which the kernel allows for multiple isolated user space instances.

contamination

Intermingling or mixing of data of one sensitivity or need-toknow level with that of another.

Content Scrambling System (CSS)

Uses encryption to enforce playback and region restrictions on DVDs.

continuous deployment/delivery

Method to make sure that you can release new changes to your customers quickly in a sustainable way. Continuous deployment goes one step further with every change that passes all stages of your production pipeline being released to your customers.

continuous integration

Software development practice whereby the work of multiple individuals is combined a number of times a day.

control plane

Network architecture plane that carries signaling traffic originating from or destined for a router. This is the information that enables routers to share information and build routing tables.

Controller Area Network (CAN bus)

Designed to allow vehicle microcontrollers and devices to communicate with each other’s applications without a host computer.

copyright

Legal protection that ensures that a work that is authored is protected from any form of reproduction or use without the consent of the copyright holder.