Examius
🇺🇸 CompTIA Security+ · flashcards
CompTIA Security+ General Security Concepts Flashcards
57 question-and-answer cards covering General Security Concepts as it is examined in CompTIA Security+. 24 of them are printed below, taken from across the deck — no signup, no paywall on the preview.
24 sample cards from the General Security Concepts deck
Sampled from the end of the deck, so these are different cards from the ones shown on the syllabus page.
What are common technical implications of a change that must be considered?
Allow/deny list updates, restricted activities, downtime, service/application restarts, legacy application impacts, and dependencies between systems.
Why is a backout (rollback) plan important in change management?
It provides a tested way to revert a change if it fails or causes problems, restoring the system to its prior working state and minimizing downtime.
What is the role of documentation and version control in change management?
Documentation records what was changed, why, and how; version control tracks revisions to configurations, code, and diagrams over time, enabling rollback, auditing, accountability, and reproducibility.
What is Public Key Infrastructure (PKI)?
The framework of hardware, software, policies, and procedures used to create, manage, distribute, store, and revoke digital certificates and public/private key pairs.
What are the main components of PKI?
Certificate Authority (CA), Registration Authority (RA), digital certificates, public and private keys, Certificate Revocation List (CRL)/OCSP, and a certificate repository.
What is key escrow in PKI?
A practice where a trusted third party securely stores a copy of cryptographic keys so they can be recovered if lost or required by authorized parties (e.g., for legal or recovery purposes).
What are the common levels/scopes at which encryption can be applied?
Full-disk, partition, volume, file, database, and record-level encryption — as well as transport/communication encryption (data in transit) versus data at rest.
What is the key difference between symmetric and asymmetric encryption?
Symmetric uses a single shared secret key for both encryption and decryption (fast, scaling/key-distribution challenges). Asymmetric uses a public/private key pair (slower, but solves key distribution and enables digital signatures).
Name two common symmetric encryption algorithms and a typical AES key size.
AES (128, 192, or 256-bit keys) and 3DES (also ChaCha20, Blowfish, Twofish). AES-256 is a common strong standard.
Name two common asymmetric algorithms.
RSA and ECC (Elliptic Curve Cryptography); also Diffie-Hellman (key exchange) and DSA.
Why is ECC preferred over RSA in resource-constrained environments?
ECC provides equivalent security to RSA with much smaller key sizes, requiring less computational power, memory, and bandwidth — ideal for mobile and IoT devices.
How are symmetric and asymmetric cryptography commonly combined (hybrid encryption)?
Asymmetric encryption is used to securely exchange a symmetric session key, then the faster symmetric key encrypts the bulk data — combining secure key distribution with performance.
What is a Trusted Platform Module (TPM)?
A dedicated hardware chip on a device's motherboard that securely stores cryptographic keys, performs cryptographic operations, and supports functions like full-disk encryption and secure boot.
What is the difference between a TPM and an HSM?
A TPM is a chip built into an individual device for that device's keys; an HSM (Hardware Security Module) is a dedicated, often removable/network appliance for high-volume, enterprise-scale key generation, storage, and cryptographic processing.
What is obfuscation, and name three techniques?
Obfuscation hides the true meaning of data/code to make it hard to understand. Techniques: steganography (hiding data within other files/media), tokenization (replacing data with non-sensitive tokens), and data masking (obscuring portions of data).
What is the difference between tokenization and encryption?
Encryption mathematically transforms data using a key and is reversible with that key. Tokenization replaces sensitive data with a random non-sensitive token, with the mapping stored separately in a secure vault — the token has no mathematical relationship to the original.
What is hashing, and name two common hashing algorithms?
Hashing is a one-way function that converts input into a fixed-length unique digest to verify integrity (it cannot be reversed). Common algorithms: SHA-256 (SHA-2 family) and SHA-3; MD5 and SHA-1 are now considered insecure.
What is salting and what attack does it defend against?
Salting adds a random value to a password before hashing so identical passwords produce different hashes. It defends against precomputed rainbow table attacks and makes brute-forcing harder.
How does a digital signature work and what three assurances does it provide?
The sender hashes the message and encrypts the hash with their private key; the recipient decrypts it with the sender's public key and compares hashes. It provides integrity, authentication, and non-repudiation.
What is the difference between a CRL and OCSP?
A Certificate Revocation List (CRL) is a periodically published list of revoked certificates that clients download. OCSP (Online Certificate Status Protocol) lets a client query a responder in real time for the status of a single certificate, reducing latency and bandwidth.
What is a wildcard certificate?
A certificate that secures a domain and all of its first-level subdomains using a single certificate (e.g., *.example.com covers mail.example.com, www.example.com).
What is a Certificate Signing Request (CSR)?
A request generated by an applicant (containing the public key and identifying information) and sent to a Certificate Authority to apply for a digital certificate. The private key is kept secret by the applicant.
What is the difference between a root certificate and a self-signed certificate?
A root certificate is the trust anchor at the top of a CA's chain, used to sign other certificates. A self-signed certificate is signed with its own private key (not a trusted CA), so it isn't automatically trusted by clients.
What is certificate pinning?
A technique where an application is hard-coded to accept only a specific certificate or public key for a host, preventing acceptance of fraudulent certificates issued by a compromised or rogue CA.
What this deck covers
The General Security Concepts deck follows the CompTIA Security+ General Security Concepts syllabus — 5 chapters and 23 topics — so questions land on material that is genuinely examinable rather than trivia around it. That works out to roughly 11.4 cards per chapter.
Answers are written to be recallable, not just readable — averaging about 192 characters, which is long enough to carry the reasoning and short enough to say out loud.
A deck like this earns its keep on the second and third pass. Read the syllabus first so you know the shape of the subject, then use the cards to find the specific facts that have not stuck.
General Security Concepts flashcards FAQ
How many General Security Concepts flashcards are in this CompTIA Security+ deck?
57 cards. This page previews 24 of them, sampled evenly across the deck so you can judge the difficulty before installing anything.
Are these CompTIA Security+ flashcards free?
Yes. The preview here is free to read with no signup, and the full 57-card deck is free inside the Examius app.
What do the General Security Concepts cards cover?
They follow the CompTIA Security+ General Security Concepts syllabus — 5 chapters and 23 topics — so the questions track what is actually examinable.
How should I use these flashcards?
Read the syllabus first so you know the shape of the subject, then drill the deck. Examius schedules each card with spaced repetition, so cards you keep missing come back sooner and ones you know drift further apart.