Acronym Match
All gamesSY0-801
Study for CompTIA Security+
Ten-question drills, short study cards and every answer explained, in CertPrep+.
Every Security+ SY0-801 acronym
All 106 acronyms in the official SY0-801 list, grouped by topic, with what each stands for and what it does, plus 25 dropped acronyms still tested as concepts.
Show the full acronym list
Ops, Identity, Risk and Tech are every acronym in the official acronym list of the CompTIA Security+ SY0-801 exam objectives (106). Full names matches each to its expansion, leaving out the few too long for a tile. Ext. adds acronyms that were dropped from the list but are still tested as concepts. The short meanings are ours.
| Acronym | Stands for |
|---|---|
| Ops 28 | |
| SIEM | Security Information and Event ManagementCollects and correlates logs |
| SOAR | Security Orchestration, Automation, and ResponseAutomates incident response |
| SOC | Security Operations CenterTeam that watches for threats |
| EDR | Endpoint Detection and ResponseWatches and responds on endpoints |
| XDR | Extended Detection and ResponseEDR across every data source |
| IDS | Intrusion Detection SystemDetects attacks and alerts |
| IPS | Intrusion Prevention SystemBlocks attacks inline |
| HIDS | Host-based Intrusion Detection SystemDetects attacks on one host |
| HIPS | Host-based Intrusion Prevention SystemBlocks attacks on one host |
| NIDS | Network-based Intrusion Detection SystemDetects attacks across the network |
| NIPS | Network-based Intrusion Prevention SystemBlocks attacks across the network |
| WIPS | Wireless Intrusion Prevention SystemBlocks rogue wireless devices |
| DLP | Data Loss PreventionStops sensitive data leaving |
| UTM | Unified Threat ManagementMany security tools in one box |
| WAF | Web Application FirewallFilters attacks on web apps |
| IPFIX | Internet Protocol Flow Information ExportExports network flow records |
| CVE | Common Vulnerabilities and ExposuresPublic ID for a known flaw |
| CVSS | Common Vulnerability Scoring SystemScores how severe a flaw is |
| CWE | Common Weakness EnumerationCatalog of weakness types |
| NVD | National Vulnerability DatabaseUS government flaw database |
| SCAP | Security Content Automation ProtocolAutomates compliance checks |
| PIR | Post-incident ReportingWrite-up after an incident |
| APT | Advanced Persistent ThreatLong, stealthy, targeted attacker |
| CSPM | Cloud Security Posture ManagementFinds cloud misconfigurations |
| SSE | Security Service EdgeSecurity delivered from the cloud |
| DDoS | Distributed Denial of ServiceFlood from many sources |
| DoS | Denial of ServiceKnocks a service offline |
| BEC | Business Email CompromiseEmail fraud posing as an exec |
| Identity 22 | |
| AAA | Authentication, Authorization, and AccountingLogin, permissions and logging |
| CIA | Confidentiality, Integrity, and AvailabilityThe three core security goals |
| MFA | Multifactor AuthenticationTwo or more login factors |
| OTP | One-time PasswordCode that works only once |
| SSO | Single Sign-onOne login for many apps |
| SAML | Security Assertion Markup LanguageXML assertions for SSO |
| OAuth | Open AuthorizationGrants app access with tokens |
| LDAP | Lightweight Directory Access ProtocolQueries a user directory |
| gMSA | Group Managed Service AccountService account Windows manages |
| PKI | Public Key InfrastructureSystem of certificates and keys |
| CRL | Certificate Revocation ListList of revoked certificates |
| OCSP | Online Certificate Status ProtocolLive certificate status check |
| CSR | Certificate Signing RequestRequest sent to get a certificate |
| TLS | Transport Layer SecurityEncrypts traffic in transit |
| IPSec | Internet Protocol SecurityEncrypts IP packets |
| VPN | Virtual Private NetworkEncrypted tunnel into a network |
| CAPTCHA | Completely Automated Public Turing test to tell Computers and Humans ApartProves a user is human |
| SELinux | Security-enhanced LinuxMandatory access control on Linux |
| DKIM | DomainKeys Identified MailSigns outgoing email |
| SPF | Sender Policy FrameworkLists servers allowed to send mail |
| DMARC | Domain-based Message Authentication, Reporting, and ConformancePolicy for mail that fails checks |
| BIMI | Brand Indicators for Message IdentificationBrand logo on verified mail |
| Risk 23 | |
| ALE | Annualized Loss ExpectancyExpected loss per year |
| ARO | Annualized Rate of OccurrenceHow many times a year it happens |
| SLE | Single Loss ExpectancyLoss from a single incident |
| RPO | Recovery Point ObjectiveMost data you can afford to lose |
| RTO | Recovery Time ObjectiveLongest downtime you can accept |
| MTBF | Mean Time Between FailuresAverage uptime before failing |
| MTTR | Mean Time to RepairAverage time to fix |
| ROI | Return on InvestmentGain compared to cost |
| AUP | Acceptable Use PolicyRules for using company IT |
| NDA | Non-disclosure AgreementKeeps shared info secret |
| MOU | Memorandum of UnderstandingInformal statement of intent |
| MOA | Memorandum of AgreementFormal agreement of terms |
| MSA | Master Service AgreementUmbrella contract with a vendor |
| SOW | Statement of WorkOne project’s deliverables |
| SOP | Standard Operating ProcedureStep-by-step procedure |
| CAB | Change Advisory BoardApproves changes |
| RFP | Request for ProposalAsks vendors for proposals |
| RFQ | Request for QuoteAsks vendors for prices |
| RFI | Request for InformationAsks vendors for information |
| EOI | Expression of InterestVendor says it wants to bid |
| AML/CTF | Anti-money Laundering/Counter-terrorism FinancingRules against laundering money |
| BYOD | Bring Your Own DevicePersonal devices used for work |
| HR | Human ResourcesHiring, onboarding, offboarding |
| Tech 33 | |
| AI | Artificial IntelligenceMachines that learn and decide |
| LLM | Large Language ModelAI model that writes text |
| DHCP | Dynamic Host Configuration ProtocolHands out IP addresses |
| DNS | Domain Name SystemTurns names into IP addresses |
| IP | Internet ProtocolLogical address for routing |
| LAN | Local Area NetworkNetwork within one site |
| NIC | Network Interface CardCard that connects to the network |
| SNMP | Simple Network Management ProtocolMonitors network devices |
| VNC | Virtual Network ComputingRemote desktop control |
| GBIC | Gigabit Interface ConverterOlder hot-swap transceiver |
| SFP | Small Form-factor PluggableSmall hot-swap transceiver |
| RPS | Redundant Power SupplySecond power supply in a device |
| UPS | Uninterruptible Power SupplyBattery backup power |
| USB | Universal Serial BusCommon device port |
| OS | Operating SystemSoftware that runs the computer |
| OT | Operational TechnologyIndustrial control systems |
| BIOS | Basic Input/Output SystemFirmware that starts the PC |
| SQL | Structured Query LanguageDatabase query language |
| Portable Document FormatFixed-layout document file | |
| RTF | Rich Text FormatBasic formatted text file |
| RCS | Rich Communication ServicesModern carrier messaging |
| SMS | Short Message ServicePlain text messages |
| QR | Quick ResponseScannable square code |
| NFC | Near-field CommunicationTap-to-connect radio |
| RF | Radio FrequencyRadio signals |
| RFC | Request for CommentsDocument defining an internet standard |
| IaC | Infrastructure as CodeServers built from config files |
| CI/CD | Continuous Integration and Continuous DeploymentAutomated build and deploy |
| SaaS | Software as a ServiceSoftware you rent online |
| MDM | Mobile Device ManagementManages phones and tablets |
| LMS | Learning Management SystemOnline training platform |
| TOC | Time-of-checkWhen access gets checked |
| TOU | Time-of-useWhen the resource gets used |
| Ext. 25 · not on the SY0-801 list | |
| AES | Advanced Encryption StandardStandard symmetric cipher |
| RSA | Rivest, Shamir, AdlemanPublic-key encryption and signing |
| SHA | Secure Hash AlgorithmFamily of hash functions |
| HMAC | Hash-based Message Authentication CodeHash with a secret key |
| ECC | Elliptic Curve CryptographyPublic-key crypto with small keys |
| TPM | Trusted Platform ModuleKey chip on the motherboard |
| HSM | Hardware Security ModuleDedicated hardware for keys |
| FDE | Full Disk EncryptionEncrypts a whole drive |
| RADIUS | Remote Authentication Dial-In User ServiceCentral login for network access |
| TACACS+ | Terminal Access Controller Access-Control System PlusCentral login for device admins |
| EAP | Extensible Authentication ProtocolLogin framework used by 802.1X |
| NAC | Network Access ControlChecks devices before they join |
| WPA3 | Wi-Fi Protected Access 3Current Wi-Fi security |
| XSS | Cross-site ScriptingInjects script into a web page |
| CSRF | Cross-site Request ForgeryTricks a browser into a request |
| SQLi | SQL InjectionInjects commands into a query |
| PII | Personally Identifiable InformationData that identifies a person |
| PHI | Protected Health InformationHealth data about a person |
| SLA | Service-level AgreementPromised service levels |
| BIA | Business Impact AnalysisImpact if a process stops |
| SDN | Software-defined NetworkingNetwork run by software |
| ZTA | Zero Trust ArchitectureNever trust, always verify |
| IoT | Internet of ThingsSmart connected devices |
| ICS | Industrial Control SystemControls industrial machinery |
| SCADA | Supervisory Control and Data AcquisitionMonitors plants over wide areas |