CompTIA CySA+ complete index with explanation

corporate-owned, personally enabled (COPE)

A strategy in which an organization purchases mobile devices and users manage those devices.

corrective control

A type of control put into place to reduce the effect of an attack or other undesirable event.

cracker

An individual who attempts to break into secure systems without using the knowledge gained for any nefarious purposes.

credential stuffing

Entering a large number of spilled credentials automatically into websites until they are potentially matched to an existing account, which the attacker can then hijack for his or her own purposes.

credentialed scan

A scan performed with administrator access.

criticality

A measure of the importance of the data.

cross-site request forgery (CSRF)

An attack that exploits the website’s trust of the browser. The website thinks that the request came from the user’s browser and was actually made by the user.

cross-site scripting (XSS)

An attack that occurs when an attacker locates a website vulnerability and injects malicious code into the web application.

data correlation

The process of locating variables in the information that seem to be related.

data enrichment

A technique that allows one process to gather information from another process or source and then customize a response using the data from the second process or source.

data exfiltration

The theft of data from a device or network.

data loss prevention (DLP)

Software that attempts to prevent data leakage.

data masking

Altering data from its original state to protect it.

data plane

Network architecture plane that carries user traffic; also known as the forwarding plane.

Data Protection API (DPAPI)

API that lets you encrypt data using the user’s login credentials.

data sovereignty

The concept that data stored in digital format is subject to the laws of the country in which the data is located.

dd

A Linux command that is used is to convert and copy files.

debugging

A process that steps though the code interactively.

decompiling

A process that attempts to reconstruct high-level language source code.

decomposition

The process of breaking down software to discover how it works, perhaps who created it, and, in some cases, how to prevent the software from performing malicious activity.