CySA+ Exam guide with complete solution graded A+

DNS Sinkhole - Provide a response to a DNS query that does not resolve the IP address.. Instead targets the addresses for known malicious domains Role-Based access control (RBAC) - grants permissions based on a user's role or group. Reverse Engineering - the process of decontructing something in order to discover its features and constituents Banner grabbing - used to gain information about a computer system on a network and the services running on its open ports. Administrators can use this to take inventory of the systems and services on their network. Cross-site scripting XSS - a vulnerability in a web application that allows malicious users to execute arbitrary client side scripts. Forensic Acquisition - The process of extracting the digital contents from seized evidence so that they may be analyzed Fuzzing - techniqued used to discover flaws and vulnerabilities in software by sending large amounts of malformed, unexpected, or random data to the target programs in order to trigger failures Netstat - command-line interface tool that provides information on the status of network connections and listening sockets Input validation - an approach to protecting systems from abnormal user input by testing the data provided against appropriate values. (cha p 14) Interception Proxy - is a software tool that is inserted between two endpoints usually on the same network. to monitor traffic and help with security testing.SQL injection - A code injection technique that exploits security vulnerabilities in the DB layer of an application