CompTIA Exam Prep - ITF+, A+, Network+, Security+, CySA+

WiGLE.et  WiGLE.net (Wireless Geographic Logging Engine) is a large, community-driven database and mapping platform for collecting, visualizing, and analyzing wireless network information worldwide. What WiGLE.net is WiGLE (pronounced “wiggle”) is both: A website (wigle.net) A crowdsourced database It allows users to search for and map wireless networks, including: Wi-Fi (WLAN) Bluetooth Cellular towers How WiGLE Works 1. Data Collection WiGLE relies on crowdsourced wardriving: Users run the WiGLE app (Android) or other tools Devices collect: SSID (network name) BSSID (MAC address of access point) Signal strength Encryption type (WEP, WPA2, open) GPS coordinates Important: WiGLE does NOT collect passwords or network traffic It only collects broadcast metadata   2. Data Upload & Aggregation Collected data is uploaded to WiGLE’s servers Over time, this builds a massive global wireless map The database contains billions of network observations 3. Mapping & Search Users ca...

Ad Spy  Ad Spy (often written as Ads Spy) refers to tools and techniques used to research, monitor, and analyze competitors’ online advertisements across platforms like Facebook, Instagram, TikTok, Google, YouTube, and more. The core idea: See what ads other businesses are running so you can learn what works, avoid what doesn’t, and improve your own marketing strategy. Below is a detailed, structured breakdown. What “Ad Spy” Actually Means Ad spying is the practice of collecting publicly available advertising data , not hacking, not accessing private accounts. Platforms like Meta’s Ad Library make many ads publicly viewable for transparency. Ad spy tools simply aggregate, filter, and analyze these ads so marketers can study them efficiently. Why People Use Ad Spy Tools 1. Competitor Research See what your competitors are promoting. Understand their messaging, offers, and creative style. Identify their funnels (landing pages, CTAs, etc.). 2. Creative Inspiration Find high-performin...

Common Platform Enumeration (CPE) Common Platform Enumeration (CPE) is a standardized, machine‑readable naming system used to uniquely identify software, operating systems, and hardware platforms. It enables consistent vulnerability tracking, asset management, and automation across cybersecurity tools.  What CPE Is CPE is an open standard originally developed by MITRE and now maintained by NIST as part of the National Vulnerability Database (NVD). Its purpose is to ensure that every IT product has a consistent, structured identifier, so security tools can reliably determine which systems are affected by vulnerabilities.  CPE is used in: CVE records to list affected products Vulnerability scanners to match installed software to known issues SBOMs (Software Bills of Materials) to identify components consistently SCAP (Security Content Automation Protocol) for automated compliance and vulnerability management  CPE Structure (Version 2.3) The current standard is CPE 2.3, w...

  Common Configuration Enumeration (CCE)  Common Configuration Enumeration (CCE) is a standardized system used in cybersecurity to uniquely identify security configuration issues and system settings. What is CCE? CCE provides: A dictionary of unique identifiers (IDs) for configuration settings A way to standardize how configurations are described across tools, vendors, and organizations Think of CCE like: CVE → Identifies vulnerabilities CCE → Identifies configuration issues or settings Purpose of CCE CCE helps organizations: Standardize configuration checks Map security settings across different tools Improve compliance validation Enable consistent reporting and auditing How CCE Works Each configuration issue is assigned a unique identifier, such as: CCE-12345-6 This ID corresponds to a specific configuration rule, for example: Password complexity requirement enabled SSH root login disabled Firewall properly configured Structure of a CCE Entry A CCE entry typically inclu...

 Shibboleth in Technology  In modern IT contexts, Shibboleth is a federated identity management system used for authentication. What is Shibboleth (Tech)? Shibboleth is an open-source Single Sign-On (SSO) system that allows users to authenticate once and gain access to multiple systems across different organizations. How Shibboleth Works Shibboleth uses a federated identity model, meaning: Your identity is managed by one organization You can use it to access services from another organization Key Components: 1. Identity Provider (IdP) Authenticates the user (e.g., your university login system) 2. Service Provider (SP) The application or system you want to access (e.g., a library database) 3. Federation A trust relationship between multiple organizations 4. SAML (Security Assertion Markup Language) The underlying protocol used to exchange authentication and authorization data Example Scenario: 1. You try to access a university library database. 2. The database (Service Provider...

 What is Key Rotation Key rotation is the systematic, periodic replacement of cryptographic keys used for encryption, authentication, signing, or API access. It is a core part of the key management lifecycle, ensuring that even if a key is stolen, its usefulness is short‑lived.  Rotation applies to several key types: Data Encryption Keys (DEKs) — directly encrypt data. Key Encryption Keys (KEKs) — encrypt DEKs, allowing rotation without re-encrypting all data. Asymmetric key pairs — used for TLS, signatures, or secure communication.  Why Key Rotation Matters Key rotation is essential because it: Limits exposure if a key is leaked or stolen. Reduces insider threat risk by shortening how long any one person’s access remains valid. Meets compliance requirements (GDPR, HIPAA, PCI‑DSS, NIST). Prevents long‑term exploitation of static keys.  Without rotation, a compromised key could be used for months or years without detection.  How Key Rotation Works Although implem...

 Perfect Forward Secrecy  Perfect Forward Secrecy (PFS) is a property of secure communication protocols that ensures: If long‑term keys are ever compromised in the future, past encrypted communications remain secure. In other words, even if an attacker steals your server’s private key years later, they still cannot decrypt old traffic they recorded. This is a huge deal for long‑term privacy. Why PFS Exists Traditional encryption (without PFS) works like this: A server has a long‑term private key Clients use that key to negotiate encryption If someone records the traffic and later steals the private key, they can decrypt everything This is a catastrophic failure mode. PFS fixes that by ensuring each session uses a unique, temporary key that is destroyed after use. How PFS Works (Step-by-Step) 1. Ephemeral key exchange Protocols with PFS use ephemeral Diffie–Hellman: DHE (Diffie–Hellman Ephemeral) ECDHE (Elliptic Curve Diffie–Hellman Ephemeral) “Ephemeral” means the key exists o...

 What PGP Actually Is Pretty Good Privacy (PGP) is a cryptographic system used for: Encrypting data (emails, files, backups) Digitally signing data (proving authenticity and integrity) Managing keys (public/private keypairs) PGP uses a hybrid cryptosystem: Asymmetric encryption (public/private keys) to exchange a session key Symmetric encryption (fast algorithms like AES) to encrypt the actual data This gives you the best of both worlds: strong identity verification and efficient encryption. How PGP Works (Step-by-Step) 1. Keypair creation You generate: A public key (shared with the world) A private key (kept secret) 2. Encrypting a message The sender encrypts the message using your public key Only your private key can decrypt it 3. Signing a message The sender signs the message with their private key Anyone can verify the signature using the sender’s public key This gives: Confidentiality (only the intended recipient can read it) Integrity (message wasn’t altered) Authentication (...

 The Sarbanes‑Oxley Act (SOX)  The Sarbanes‑Oxley Act of 2002, often called SOX, is a U.S. federal law enacted in response to catastrophic corporate accounting scandals, most notably Enron and WorldCom, that destroyed investor confidence in U.S. financial markets. The Act established strict reforms to improve corporate governance, financial reporting accuracy, and auditor independence. Its primary goal is to protect investors by requiring public companies to maintain truthful financial disclosures and strong internal controls.  1. Why SOX Was Created: The Historical Background Between the late 1990s and early 2000s, several major corporations engaged in fraudulent accounting practices, including the use of shell entities, the concealment of losses, and the manipulation of financial statements to mislead investors. These abuses led to massive stock collapses and wiped out employee retirement funds. SOX was enacted to restore trust, stop fraud, and ensure transparency. 2. T...

 What Gamification Means in an IT Context Gamification introduces game mechanics into IT workflows to influence behavior and improve outcomes. These mechanics include: Points for completing tasks Badges for achievements Leaderboards to encourage friendly competition Levels that show progression Challenges or quests that break work into goals Rewards (digital or real) for performance Feedback loops that show progress in real time The goal isn’t to turn IT into a literal game, it’s to use game psychology to make people more engaged and consistent in their work. Why Gamification Works (The Psychology Behind It) Gamification taps into core human motivators: Competence — feeling skilled and improving over time Autonomy — choosing how to complete tasks Relatedness — connecting with peers through shared goals Achievement — earning recognition and rewards Curiosity — exploring challenges and solving problems This is why gamification is especially effective in IT, where tasks can be repet...

 TOTP vs. HOTP: Key Differences Explained What They Are HOTP (HMAC‑Based One‑Time Password):  Generates a one‑time password based on a counter that increases each time a code is requested. TOTP (Time‑Based One‑Time Password):  Generates a one‑time password based on the current time, usually in 30‑second intervals. Core Difference How They Work HOTP Both server and client store a shared secret key. A counter increments each time a code is generated. The HOTP value = HMAC (secret, counter). The server accepts the code if its counter is within a small “window.” Implication: If someone obtains an unused HOTP code, it works until someone uses it. Also uses a shared secret key, but instead of a counter: TOTP = HMAC (secret, current_time_interval). The time is divided into slices (typically 30 seconds). Codes expire automatically. Implication: Even if someone steals a code, it becomes useless within seconds. Security Considerations HOTP ✅ Resistant to time drift ❌ Vulnerable be...

 Mandatory Vacation A mandatory vacation (also called forced vacation or required time off) is a policy requiring employees to take a minimum number of consecutive days away from work each year. During this time, the employee must fully disconnect, no emails, calls, or remote work. Unlike regular PTO, which employees may choose to use or not, mandatory vacation is enforced by the organization. Why Organizations Use Mandatory Vacation 1. Fraud Prevention & Internal Controls Mandatory vacation is widely used in industries like finance, banking, auditing, and cybersecurity because taking employees out of their routine for consecutive days can: Expose fraudulent activity Reveal irregularities that might go unnoticed Break the ability to conceal ongoing misconduct Many financial institutions require at least 5–10 consecutive business days away for this reason. 2. Risk Management & Business Continuity Organizations use it to ensure: Teams do not rely too heavily on a single perso...