Comptia Security Plus Sy0

Confidentiality, Integrity, and Availability

AAA (Authentication, Authorization, Accounting)

Authentication verifies identity ("who you are"); authorization determines permitted actions ("what you can do")

Assurance that a party cannot deny having performed an action, typically via digital signatures or audit logs

An extension of the CIA triad adding Possession, Authenticity, and Utility

A layered security strategy using multiple overlapping controls so no single failure causes compromise

Granting users only the minimum access rights necessary to perform their job functions

Access is granted only to information required for a specific task, even if broader clearance exists

Splitting critical tasks among multiple people to prevent any single person from committing fraud undetected

Threat = potential cause of harm; Vulnerability = weakness that can be exploited; Risk = likelihood x impact of a threat exploiting a vulnerability

A software flaw unknown to the vendor with no patch available, actively exploited by attackers

Common Vulnerabilities and Exposures - a unique identifier assigned to a publicly known security vulnerability