CompTia Security+ (SY0-701) Acronym List Exam questions and correct answers

CompTia Security+ (SY0-701) Acronym List Exam questions and correct answers XSRF - Cross-Site Request Forgery-An attack that causes users to perform actions on websites without their knowledge. In some cases, attackers use header manipulation to steal cookies and harvest passwords. 3DES - Triple Digital Encryption Standard. A symmetric algorithm used to encrypt data and provide confidentiality. It was originally designed as a replacement for DES. It uses multiple keys and multiple passes and is not as efficient as AES, but is still used in some applications, such as when hardware doesn't support AES. AAA - AAA stands for authentication, authorization, and accounting. AAA is a framework for intelligently controlling access to computer resources, enforcing policies, auditing usage, and providing the information necessary to bill for services. ABAC - Attribute-based access control. An access control model that grants access to resources based on attributes assigned to subjects and objects.