CompTIA CySA+ complete index with explanation

deidentification

The process of deleting or masking personal identifiers, such as personal name from a set of data.

demilitarized zone (DMZ)

A network logically separate from the intranet where resources that will be accessed from the outside world are made available to unauthenticated users.

denial-of-service (DoS) attack

An attack in which attackers flood a device with enough requests to degrade the performance of the targeted device.

dereference

Occurs when a pointer with a value of NULL is used as though it pointed to a valid memory area.

destruction

The destroying of the media on which data resides.

detective control

A type of control that is in place to detect an attack while it is occurring.

deterrent control

A type of control that deters or discourages an attacker.

DevSecOps

A development concept that grew out of the DevOps approach to software development that emphasizes security in all phases.

DHCP snooping

Used to prevent a poisoning attack on the DHCP database.

Diamond Model of Intrusion Analysis

Intrusion analysis model that emphasizes the relationships and characteristics of four basic components: the adversary, capabilities, infrastructure, and victims.

digital rights management (DRM)

Used to control the use of digital content.

digital signature

A hash value encrypted with the sender’s private key.

digital watermarking

Involves embedding a logo or trademark in documents, pictures, or other objects.

directive control

A type of control that specifies acceptable practice within an organization.

directory traversal

One of the ways malicious individuals are able to access parts of a directory to which they should not have access.

disassembly

Reading the machine code into memory and then outputting each instruction as a text string.

dissemination

The step in the intelligence cycle where information is shared with those responsible for designing security controls to address issues.

DNP3

A master/slave protocol used in building automation that uses port 19999 when using Transport Layer Security (TLS) and port 20000 when not using TLS.

DOM XSS

XSS attack in which the entire tainted data flow from source to sink takes place in the browser. The source of the data is in the DOM, the sink is also in the DOM, and the data flow never leaves the browser.

domain bridging

Using as a hotspot a device that has been made a member of the domain, allowing access to the organizational network to anyone using the hotspot.