Security+ Acronym Database

AAA

Authentication, Authorization, and Accounting

Domain 1

ACL

Access Control List

Domain 3

AES

Advanced Encryption Standard

Domain 1

ALE

Annualized Loss Expectancy

Domain 5

APT

Advanced Persistent Threat

Domain 2

ARO

Annualized Rate of Occurrence

Domain 5

BYOD

Bring Your Own Device

Domain 4

CA

Certificate Authority

Domain 1

CASB

Cloud Access Security Broker

Domain 3

CIA

Confidentiality, Integrity, Availability

Domain 1

CISO

Chief Information Security Officer

Domain 5

CRL

Certificate Revocation List

Domain 1

CSRF

Cross-Site Request Forgery

Domain 2

DDoS

Distributed Denial of Service

Domain 2

DLP

Data Loss Prevention

Domain 4

DNS

Domain Name System

Domain 3

EDR

Endpoint Detection and Response

Domain 4

FDE

Full Disk Encryption

Domain 1

FIM

File Integrity Monitoring

Domain 4

GPO

Group Policy Object

Domain 4

HIDS

Host-based Intrusion Detection System

Domain 4

HSM

Hardware Security Module

Domain 1

IaaS

Infrastructure as a Service

Domain 3

ICS

Industrial Control System

Domain 3

IDS

Intrusion Detection System

Domain 4

IPS

Intrusion Prevention System

Domain 4

LDAP

Lightweight Directory Access Protocol

Domain 1

MFA

Multi-Factor Authentication

Domain 1

MITM

Man-in-the-Middle

Domain 2

NAC

Network Access Control

Domain 3

NIDS

Network-based Intrusion Detection System

Domain 4

NIST

National Institute of Standards and Technology

Domain 5

OCSP

Online Certificate Status Protocol

Domain 1

OSINT

Open Source Intelligence

Domain 2

PAM

Privileged Access Management

Domain 4

PCI-DSS

Payment Card Industry Data Security Standard

Domain 5

PII

Personally Identifiable Information

Domain 5

PKI

Public Key Infrastructure

Domain 1

RADIUS

Remote Authentication Dial-In User Service

Domain 1

RAID

Redundant Array of Independent Disks

Domain 3

RDP

Remote Desktop Protocol

Domain 3

RPO

Recovery Point Objective

Domain 5

RTO

Recovery Time Objective

Domain 5

SAML

Security Assertion Markup Language

Domain 1

SASE

Secure Access Service Edge

Domain 3

SCADA

Supervisory Control and Data Acquisition

Domain 3

SIEM

Security Information and Event Management

Domain 4

SLE

Single Loss Expectancy

Domain 5

SMTP

Simple Mail Transfer Protocol

Domain 3

SNMP

Simple Network Management Protocol

Domain 3

SOAR

Security Orchestration, Automation, and Response

Domain 4

SOC

Security Operations Center

Domain 4

SQL

Structured Query Language

Domain 2

SSH

Secure Shell

Domain 3

SSL

Secure Sockets Layer

Domain 1

SSO

Single Sign-On

Domain 1

TACACS+

Terminal Access Controller Access-Control System Plus

Domain 1

TLS

Transport Layer Security

Domain 1

TPM

Trusted Platform Module

Domain 1

UAC

User Account Control

Domain 4

VDI

Virtual Desktop Infrastructure

Domain 3

VLAN

Virtual Local Area Network

Domain 3

VPN

Virtual Private Network

Domain 3

WAF

Web Application Firewall

Domain 3

WPA3

Wi-Fi Protected Access 3

Domain 3

XDR

Extended Detection and Response

Domain 4

XSS

Cross-Site Scripting

Domain 2

ZTNA

Zero Trust Network Access

Domain 3