CompTIA CySA+ complete index with explanation

domain generation algorithm (DGA)

Algorithm that is used by attackers to periodically generate large numbers of domain names that can be used as rendezvous points with their command and control servers.

Domain-based Message Authentication, Reporting, and Conformance (DMARC)

An e-mail authentication and reporting protocol that improves e-mail security within federal agencies.

DomainKeys Identified Mail (DKIM)

Allows e-mail source verification by providing a method for validating a domain name identity that is associated with a message through cryptographic authentication.

dual-homed firewall

A type of firewall with two interfaces, one pointing to the internal network and another connected to the untrusted network.

dynamic analysis

Software code analysis done with the code executing.

Dynamic ARP Inspection (DAI)

A security feature that intercepts all ARP requests and responses and compares each response’s MAC address and IP address information against the MAC–IP bindings contained in a trusted binding table.

Economic Espionage Act of 1996

Affects companies that have trade secrets and any individuals who plan to use encryption technology for criminal activities.

eFuse

Allows for the dynamic real-time reprogramming of computer chips.

Electronic Communications Privacy Act (ECPA) of 1986

Affects law enforcement and intelligence agencies; extended government restrictions on wiretaps from telephone calls to include transmissions of electronic data by computer and prohibited access to stored electronic communications.

e-mail signature block

A set of information such as name, e-mail address, company title, and credentials that usually appears at the end of an e-mail.

emanations

Electromagnetic signals that are emitted by an electronic device.

embedded

Functionality that is integrated into a program or a device.

embedded link

A link embedded in one website that leads to another site.

embedded system

A piece of software built into a larger piece of software that is in charge of performing some specific function on behalf of the larger system.

employee privacy issues and expectation of privacy

Concept that organizations must give employees the proper notice of any monitoring that might be used.

Encapsulating Security Payload (ESP)

IPsec component that provides all that AH does as well as data confidentiality.

EnCase Forensic

A case (incident) management tool that offers built-in templates for specific types of investigations.

endpoint detection and response (EDR)

A proactive endpoint security approach designed to supplement existing defenses.

enumeration

The process of discovering what is in the network along with any other pieces of information that might be helpful in a network attack or compromise.

EU Electronic Security Directive

Defines electronic signature principles.