Find Flashcards
Discover millions of Flashcards
- Browse Brainscape-Certified Flashcards
  
  Learn faster with our catalog of expert certified, pre-made flashcards.
- Browse All Flashcards
  
  Browse our full catalog of user-generated and Brainscape-Certified flashcards.
- Explore the Knowledge Genome of subjects:
Make Flashcards
How It Works
- Features Overview
- The Science of Studying
Educators
- Schools & Teachers
- Tutors & Resellers
Businesses
- Employee Training
- Publishers & Resellers
Academy

Log in My Dashboard
Get Started Log out

CompTIA Security+ > Federation > Flashcards

Federation Flashcards

(1 cards)

Study These Flashcards

1

Q

What is a Federation?

A

A system that allows SSO across multiple organizations/ domains beyond just one

How well did you know this?

1

Not at all

2

3

4

5

Perfectly

CompTIA Security+

flashcards

Decks in class (211)

# Cards

Threat Actor Motivations

Organized Crime

Unskilled Attackers

Nation-State Actor

Insider Threats

Threat Vectors and Attack Surfaces

Outsmarting Threat Actors

PHYSICAL SECURITY

Fencing and Bollards

Attacking with Brute Force

Surveillance Systems

Bypassing Surveillance Systems

Access Control Vestibules

Access Badge Cloning

SOCIAL ENGINEERING

Motivational Triggers

Phishing Attacks

Preventing Phishing Attacks

Frauds and Scams

Influence Campaigns

Other Social Engineering Attacks

Zombies and Botnets

Backdoors and Logic Bombs

Spyware and Bloatware

Malware Attack Techniques

Indications of Malware Attacks

DATA PROTECTION

Data Classifications

Data Sovereignty

Data Loss Prevention (DLP)

CRYPTOGRAPHIC SOLUTIONS

Symmetric vs Asymmetric

Symmetric Algorithms

Asymmetric Algorithms

Pass the Hash Attack

RISK MANAGEMENT

Risk Assessment Frequency

Risk Identification

Qualitative Risk Analysis

Quantitative Risk Analysis

Risk Management Strategies

Risk Monitoring and Reporting

THIRD-PARTY VENDOR RISKS

Supply Chain Risks

Supply Chain Attacks

Vendor Assessment

Vendor Selection and Monitoring

Contracts and Agreements

GOVERNANCE AND COMPLIANCE

Governance Structures

Governance Considerations

Non-compliance Consequences

ASSET AND CHANGE MANAGEMENT

Acquisition and Procurement

Mobile Asset Deployments

Asset Management

Asset Disposal and Decommissioning

Change Management

Change Management Processes

Technical Implications of Changes

Documenting Changes

AUDITS AND ASSESSMENTS

Internal Audits and Assessments

Performing an Internal Assessment

External Audits and Assessments

Penetration Testing

Reconnaissance in Pentesting

Attestation of Findings

CYBER RESILIENCE AND REDUNDANCY

High Availability

Data Redundancy

Capacity Planning

Powering Data Centers

Continuity of Operations Plan

Redundant SIte Considerations

Resilience and Recovery Testing

SECURITY ARCHITECTURE

On-Premise Vs the Cloud

Virtualization and Containerization

Network Infrastructure

Software-defined Network (SDN)

Infrastructure as Code (IaC)

Centralized vs. Decentralized Architectures

Internet of Things (IoT)

Embedded Systems

SECURITY INFRASTRUCTURE

Ports and Protocols

Configuring Firewalls

Network Appliances

Securing Network Communications

Infrastructure Considerations

Selecting Infrastructure Controls

IDENTITY AND ACCESS MANAGEMENT (IAM) SOLUTIONS

Identity and Access Management (IAM)

Multi-factor Authentication

Password Security

Password Attacks

Single Sign-On (SSO)

Privileged Access Management (PAM)

Access Control Models

Assigning Permissions

VULNERABILITIES AND ATTACKS

Hardware Vulnerabilities

Bluetooth Vulnerabilities and Attacks

Mobile Vulnerabilities and Attacks

Zero-day Vulnerabilities

Operating System Vulnerabilities

SQL and XML Injections

Buffer Overflow

Race Conditions

MALICIOUS ACTIVITY

Distributed Denial of Service

Domain Name System (DNS) Attacks

Directory Traversal Attack

Execution and Escalation Attacks

Session Hijacking

On-path Attacks

Injection Attacks

Indicators of Compromise (IoC)

Restricting Applications

Trusted Operating Systems

Updates and Patches

Patch Management

Data Encryption Levels

Secure Baselines

SECURITY TECHNIQUES

Wireless Infrastructure

Wireless Security Settings

Application Security

Network Access Control (NAC)

Web and DNS Filtering

Endpoint Detection and Response

User Behavior Analytics

Selecting Secure Protocols

VULNERABILITY MANAGEMENT

Identifying Vulnerabilities

Threat Intellegence Feeds

Responsible Disclosure Programs

Analyzing Vulnerabilities

Vulnerability Response and Remediation

Validating Vulnerability Remediation

Vulnerability Reporting

ALERTING AND MONITORING

Monitoring Resources

Alerting and Monitoring Activities

Simple Network Management Protocol (SNMP)

Security Information and Event Management (SIEM)

Data from Security Tools

Security Content Automation Protocol (SCAP)

Network and Flow Analysis

Single Pane of Glass

INCIDENT RESPONSE

Incident Response Process

Root Cause Analysis

Incident Response Training and Testing

Digital Forensic Procedure

Data Collection Procedures

INVESTIGATING AN INCIDENT

Investigative Data

Automated Reports

Vulnerability Scans

Packet Captures

AUTOMATION AND ORCHESTRATION

When to Automate and Orchestrate

Automating Support Tickets

Automating Onboarding

Automating Security

Automating Application Development

Integrations and APIs

Key Links
Subjects
Company
- About Us
- Earn Money!
- Academy
- Swag Shop
- Contact
- Terms
- Privacy Policy
- Podcasts
- Careers
Find Us

Brainscape helps you reach your goals faster, through stronger study habits.
© 2026 Bold Learning Solutions. Terms and Conditions