CompTIA CySA+ complete index with explanation

executable process analysis

Determines what process is using/taxing the CPU.

exposure factor (EF)

The percentage value or functionality of an asset that will be lost when a threat event occurs.

Extensible Access Control Markup Language (XACML)

A standard for an access control policy language using XML.

Extensible Markup Language (XML) attack

An attack that targets the use of XML in a website. In one example, it compromises the application that parses or reads and interprets the XML. If the XML input contains a reference to an external entity and is processed by a weakly configured XML parser, it can lead to the disclosure of confidential data, denial of service, server-side request forgery, and port scanning. This is called an XML external entity attack.

external scan

A vulnerability scan performed from outside the organization’s network to assess the likelihood of an external attack.

extranet

A network logically separate from the intranet where resources that will be accessed from the outside world are made available to authenticated users. From the Library of Matthias Boeker

false negative

Occurs when a scanner does not identity a vulnerability that actually exists.

false positive

Occurs when a scanner identifies a vulnerability that does not exist.

FATKit

A memory forensics tool that automates the process of extracting interesting data from volatile memory.

fault tolerance

Provided when a backup component begins operation when the primary component fails.

Federal Information Security Management Act (FISMA) of 2002

Requires all federal agencies to develop, document, and implement an agencywide information security program.

Federal Intelligence Surveillance Act (FISA) of 1978

The first act to give procedures for the physical and electronic surveillance and collection of “foreign intelligence information” between “foreign powers” and “agents of foreign powers” and applied only to traffic within the United States. It was amended by the USA PATRIOT Act of 2001 and the FISA Amendments Act of 2008.

Federal Privacy Act of 1974

Provides guidelines on collection, maintenance, use, and dissemination of PII about individuals that is maintained in systems of records by federal agencies.

field programmable gate array (FPGA)

A type of programmable logic device (PLD) that is programmed by blowing fuse connections on the chip or using an antifuse that makes a connection when a high voltage is applied to the junction. A PLD is an integrated circuit with connections or internal logic gates that can be changed through a programming process.

FIN scan

Type of scan that sets the FIN bit only.

firewall

Device or software whose purpose is to inspect and control the type of traffic allowed.

flow analysis

Type of analysis that focuses on ensuring that confidential and private information is isolated from other information.

forensic investigation suite

A collection of tools that are commonly used in digital forensic investigations.

Forensic Toolkit (FTK)

A commercial toolkit that can scan a hard drive for all sorts of information.

formal method

Method of software analysis that follows prescribed procedures.