Core security concepts
| Acronym | Meaning |
|---|---|
| CIA | Confidentiality, Integrity, Availability — the security triad |
| AAA | Authentication, Authorization, Accounting |
| MFA | Multi-Factor Authentication |
| SSO | Single Sign-On |
| RBAC | Role-Based Access Control |
| PoLP | Principle of Least Privilege |
Cryptography & PKI
| Acronym | Meaning |
|---|---|
| PKI | Public Key Infrastructure |
| CA | Certificate Authority |
| TLS | Transport Layer Security (replaces SSL) |
| HSM | Hardware Security Module |
| MAC | Message Authentication Code (also Mandatory Access Control) |
Defenses & monitoring
| Acronym | Meaning |
|---|---|
| IDS / IPS | Intrusion Detection / Prevention System |
| SIEM | Security Information and Event Management |
| DLP | Data Loss Prevention |
| WAF | Web Application Firewall |
| EDR | Endpoint Detection and Response |
| SOC | Security Operations Center |
Threats & attacks
| Acronym | Meaning |
|---|---|
| MITM | Man-in-the-Middle attack |
| DDoS | Distributed Denial of Service |
| XSS | Cross-Site Scripting |
| CSRF | Cross-Site Request Forgery |
| RCE | Remote Code Execution |
| APT | Advanced Persistent Threat |
Test yourself
4 quick questions — tap an answer to check it instantly. Nothing is sent anywhere.
1. CIA in security stands for…
Answer: B. The CIA triad = Confidentiality, Integrity, Availability.
2. AAA stands for…
Answer: A. AAA = Authentication, Authorization, Accounting.
3. A SIEM is used to…
Answer: B. SIEM = Security Information and Event Management — log aggregation and analysis.
4. Which can block an attack inline, not just alert?
Answer: B. An IPS can block inline; an IDS only detects and alerts.
Sources
- CompTIA Network+ / Security+ exam objectives.
- Relevant RFCs and vendor documentation.
Reference summary only.