CompTIA A+ Core 2 (220-1202) · glossary

A+ Core 2 glossary

661 terms you need for CompTIA A+ Core 2 (220-1202), in plain words. Each one links to the lesson that teaches it. The acronym list is further down.

#A B C D E F G H I J K L M N O P Q R S T U V W X Z Acronyms

#
.app: Uninstalling: drag the .app to the Trash and empty it. Lesson: Installing and removing apps
.dmg: .dmg: a disk image; double-click to mount it, then drag the app into Applications Lesson: Installing and removing apps
.pkg: Apps installed from a .pkg may need the vendor's uninstaller to remove all files. Lesson: Installing and removing apps
/etc/fstab: /etc/fstab: filesystems to mount at boot Lesson: Configuration files and OS components
/etc/hosts: /etc/hosts: local name-to-IP entries, checked before DNS Lesson: Configuration files and OS components
/etc/passwd: /etc/passwd: user accounts (no real passwords stored here) Lesson: Configuration files and OS components
/etc/resolv.conf: /etc/resolv.conf: DNS servers the system uses Lesson: Configuration files and OS components
/etc/shadow: /etc/shadow: hashed passwords, readable only by root Lesson: Configuration files and OS components
3-2-1 backup rule: 3-2-1 backup rule: 3 copies of data, on 2 different media types, with 1 copy offsite Lesson: Rotation schemes
32-bit: A 64-bit OS runs 64-bit apps and most 32-bit apps (Windows puts 32-bit apps in C:\Program Files (x86)). Lesson: 32-bit vs. 64-bit
64-bit: A 64-bit OS runs 64-bit apps and most 32-bit apps (Windows puts 32-bit apps in C:\Program Files (x86)). Lesson: 32-bit vs. 64-bit
A
Acceptable use policy (AUP): The acceptable use policy (AUP) says what users may and may not do with company systems: no personal crypto mining, no illegal content, limited personal use. Lesson: AUP and compliance
Access control lists (ACLs): Access control lists (ACLs): lists of who can do what to a resource (files, firewall rules) Lesson: Principles
Access control vestibule: Access control vestibule: two doors, only one opens at a time; stops tailgating (formerly called a mantrap) Lesson: Keeping people and vehicles out
Accessibility: System Preferences (renamed System Settings in macOS 13 Ventura) holds: Displays (resolution, arrangement), Networks (Wi-Fi, Ethernet, VPN), Printers & Scanners, Privacy (Privacy & Security: app access to camera,… Lesson: System Preferences
Accounts: Accounts: your info, email accounts, sign-in options (PIN, Windows Hello), access work or school, family and other users Lesson: More Settings categories
Accuracy: Accuracy: answers can be outdated or subtly wrong; verify before acting (especially commands and scripts) Lesson: Limitations
Activate/deactivate: Activate/deactivate: you can turn real-time protection off briefly for troubleshooting; Windows turns it back on automatically. Lesson: Microsoft Defender Antivirus
Active Directory: Active Directory (AD) holds users, computers and groups for the domain. Lesson: Domain tasks a tech performs
Actively listen: Actively listen: take notes and avoid interrupting. Lesson: Listening and difficult customers
Ad blockers: Ad blockers: block ads and malvertising Lesson: Browser settings
Administrative Tools: Administrative Tools: shortcuts to the MMC tools (called Windows Tools in Windows 11) Lesson: Control Panel applets, part 2
Administrator: Administrator: full control, can install software and change system settings Lesson: Users and groups
Adware / PUP: Adware / PUP (potentially unwanted program): ads, toolbars and bundled junk the user 'agreed' to Lesson: Malware that spies, steals or extorts
AES: AES: strong standard cipher used by WPA2 and WPA3 Lesson: Protocols and encryption
affected systems/impact: A request form captures: purpose of the change (why), scope of the change (what and how much), date and time, affected systems/impact, risk analysis and risk level. Lesson: The change request
Air filter mask: Safety goggles when cutting, crimping or using compressed air; an air filter mask for dust and toner Lesson: Personal safety and cables
Alarm systems: Alarm systems: sound or alert when a door or window is forced Lesson: Detecting and recording
Alternative location: Recovery options: in-place/overwrite (restore to the original location, replacing current files) or alternative location (restore elsewhere to compare or avoid overwriting). Lesson: Recovery and testing
Android: Android is open source from Google, used by many manufacturers, with apps from Google Play and other stores. Lesson: Mobile OSs
Anti-malware: Endpoint security software: mobile antivirus and anti-malware, plus content filtering that blocks dangerous or banned sites and apps. Lesson: Patches and endpoint security
Antiphishing training: Antiphishing training: simulated phishing emails and short lessons Lesson: Recovery and prevention methods
Antistatic bags: Antistatic bags: store and carry boards, RAM and drives in them; never set a part ON top of the bag's outside Lesson: Electrostatic discharge (ESD)
Antivirus: Antivirus: macOS has built-in malware protection (XProtect); companies often add endpoint protection Lesson: macOS best practices
Antivirus / anti-malware: Antivirus / anti-malware: signature and behavior scanning on each PC (anti-malware covers the wider range: spyware, PUPs, rootkits) Lesson: Detection and response tools
APFS: APFS (Apple File System): macOS, iOS and iPadOS today; built for SSDs, with snapshots and native encryption Lesson: Filesystems: Linux and macOS
App availability: Plan for file format, filesystem, app availability and peripheral drivers whenever users share across platforms. Lesson: Compatibility concerns between OSs
App Store: App Store: Apple-reviewed apps, installed and updated automatically Lesson: Installing and removing apps
Apple ID: An Apple ID (Apple Account) signs in to the App Store, iCloud, iMessage and FaceTime. Lesson: Apple ID and corporate restrictions
Application security: Application security: allow a specific app through (an exception) on the Domain, Private or Public profile Lesson: Windows Defender Firewall
Application spoofing: Unauthorized/malicious application: application spoofing copies a real app's name and icon to trick users Lesson: Security concerns
Application to OS compatibility: Application to OS compatibility: supported OS versions and editions (e.g. Lesson: Read the requirements first
Application updates: Patch management: install OS updates and application updates promptly; MDM can enforce a minimum OS version. Lesson: Patches and endpoint security
Applications crashing: Applications crashing: the Application log (Event ID 1000, Application Error) names the faulting module. Lesson: Services not starting and apps crashing
Applying Group Policy: Applying Group Policy: GPOs linked to sites, domains or OUs push settings (passwords, drives, software) Lesson: Policy, groups and redirection
Appropriate use: Companies need an AI policy that covers appropriate use: which tools are approved, for which tasks, and what data may be entered. Lesson: Policy
Apps: Apps: installed apps, default apps, optional features, startup apps Lesson: Windows Settings categories
Asset tags and IDs: Asset tags and IDs: barcode or RFID labels on each device Lesson: Asset management
Assigned users: Assigned users: who is responsible for each device Lesson: Asset management
Assigning home folders: Assigning home folders: a personal network folder for each user, set in the Profile tab Lesson: Domain tasks a tech performs
Authenticator application: Authenticator application: phone app with push or codes Lesson: Multifactor authentication (MFA)
Automated backups: Automated backups (copy jobs on a schedule) Lesson: Use cases for scripting
Avoid arguing: Deal with difficult customers: avoid arguing, being defensive, dismissing issues or being judgmental. Lesson: Listening and difficult customers
Avoid distractions: Avoid distractions: no personal calls, texting/social media sites or personal interruptions while with a customer. Lesson: Listening and difficult customers
Avoid interrupting: Actively listen: take notes and avoid interrupting. Lesson: Listening and difficult customers
B
Backup plan: Backup plan: a backup taken right before the change Lesson: Documented business processes
Backup testing: Backup testing: restore test files regularly; set a frequency (e.g. Lesson: Recovery and testing
Backups: Backups: Time Machine to an external drive or network storage Lesson: macOS best practices
Badge reader: Badge reader: opens a door for a valid badge and logs who entered Lesson: Keeping people and vehicles out
Basic automation: Basic automation of routine tasks Lesson: Use cases for scripting
Battery life issues: Battery life issues: screen brightness, background apps, weak signal (radio works harder), aging battery (check battery health) Lesson: Device problems
Be culturally sensitive: Be culturally sensitive: use professional titles and designations (Dr., Mr. Lesson: How you show up
Be on time: Be on time (punctuality); contact the customer if you'll be late Lesson: How you show up
Being defensive: Deal with difficult customers: avoid arguing, being defensive, dismissing issues or being judgmental. Lesson: Listening and difficult customers
Being judgmental: Deal with difficult customers: avoid arguing, being defensive, dismissing issues or being judgmental. Lesson: Listening and difficult customers
Bias: Bias: output reflects bias in training data, which matters for hiring, lending or customer decisions Lesson: Limitations
Biometrics: Biometrics use something you are: retina scanner, fingerprint scanner, palm print scanner, facial recognition technology (FRT) and voice recognition. Lesson: Biometrics and the environment
BIOS/UEFI password: A BIOS/UEFI password stops people from changing firmware settings (boot order, Secure Boot) or booting from USB to bypass Windows. Lesson: BIOS/UEFI passwords
BitLocker: BitLocker and gpedit.msc (Local Group Policy Editor): Pro and up Lesson: Feature differences
BitLocker To Go: BitLocker To Go: encrypts removable USB drives with a password or smart card Lesson: BitLocker, BitLocker To Go and EFS
Bluetooth: Connectivity issues: Bluetooth (re-pair, forget device), Wi-Fi (forget network, toggle airplane mode), NFC (turn it on, case thickness) Lesson: Connectivity and autorotate
Bollards: Bollards: short posts that stop vehicles from ramming doors or storefronts Lesson: Keeping people and vehicles out
Boot: To install an OS, the PC must boot from install media. Lesson: Where setup boots from
Boot issues: Boot issues range from slow boots to boot loops. Lesson: Boot issues and No OS found
Boot order: No OS found (or 'Operating system not found'): check boot order first (a USB stick or disc left in), then whether the drive is detected in UEFI, then repair boot records. Lesson: Boot issues and No OS found
Boot sector virus: Boot sector virus: infects the boot sector so it loads before the OS; Secure Boot helps block it Lesson: Malware that hides or tricks
Bootloader: OS components: the bootloader (e.g. Lesson: Configuration files and OS components
Browser download/installation: Browser download/installation: get it only from trusted sources (the vendor's site or the company software portal). Lesson: Installing browsers and extensions
Browser patching: Browser patching: keep auto-update on; browsers are attacked constantly. Lesson: Patching, passwords and certificates
Brute-force attack: Brute-force attack: tries every possible combination Lesson: Password and app attacks
BSOD: A BSOD (stop error) means Windows hit a fatal error and stopped to protect data. Lesson: Blue screen of death (BSOD)
Business: Business: licensing cost, compliance, vendor support and what happens if it fails Lesson: Impact considerations for new applications
Business casual: Present a professional appearance: match the setting's attire: formal for executive meetings, business casual for most office visits Lesson: How you show up
Business email compromise (BEC): Business email compromise (BEC): a real or spoofed executive/vendor email account used to request wire transfers or gift cards Lesson: People and partners
BYOD: BYOD (bring your own device): personal devices with unknown security on the company network Lesson: Vulnerabilities
BYOD vs. corporate-owned: **BYOD vs. Lesson: Policies and procedures
C
Cable management: Cable management: route and secure cables to prevent trip hazards and strain Lesson: Personal safety and cables
Cat: cat: print a file's contents Lesson: Informational commands and nano
Categories: Description of issues, categories and severity (impact and urgency) Lesson: What a good ticket holds
Certificate Manager (certmgr.msc): Certificate Manager (certmgr.msc): the current user's digital certificates Lesson: Snap-ins, part 2
Certificate of destruction: Get a certificate of destruction (or of recycling) listing drive serial numbers, date and method. Lesson: Outsourcing and regulations
Certificate warnings: Certificate warnings on sites that are normally fine (on-path attack or fake root certificate) Lesson: Browser-related symptoms
Chain of custody: Chain of custody: a log of everyone who handled the evidence, when, and why, with signatures; no gaps Lesson: Preserving evidence
Change board: The change board (change advisory board) reviews and approves normal changes. Lesson: Approval and implementation
Change default passwords: Change default passwords on the admin login (and the default admin username if possible) Lesson: Router settings
Change freeze: Work happens inside a maintenance window, and nothing changes during a change freeze (e.g. Lesson: Approval and implementation
Change type: Change type: standard (pre-approved, routine, low risk), normal (reviewed and approved by the board), emergency (urgent fix, fast-tracked approval). Lesson: The change request
Changing the SSID: Changing the SSID from the default so it doesn't reveal the router model Lesson: Wireless and firewall settings
Character types: Character types and complexity: mix upper, lower, numbers and symbols Lesson: Data-at-rest encryption and passwords
Chkdsk: chkdsk: checks a volume. Lesson: Disk management commands
Chmod: chmod: change permissions (chmod 755 script.sh); chown: change owner (chown rosa:warehouse file) Lesson: File management commands
Chown: chmod: change permissions (chmod 755 script.sh); chown: change owner (chown rosa:warehouse file) Lesson: File management commands
ChromeOS: CompTIA lists four: Windows (most business PCs), macOS (Apple Macs only), Linux (free, open source, many distributions such as Ubuntu or Fedora) and ChromeOS (Google's Chromebooks, built around the Chrome browser and… Lesson: Workstation OSs
Clarifying statements: Use clarifying statements, open-ended questions and restate the issue to confirm. Lesson: Listening and difficult customers
Clean install: Clean install: wipe and install fresh. Lesson: Upgrade paths
Clearing browsing data: Clearing browsing data and clearing cache: fixes stale pages and removes stored data Lesson: Browser settings
Clearing cache: Clearing browsing data and clearing cache: fixes stale pages and removes stored data Lesson: Browser settings
CMOS battery: A dead CMOS battery loses time when the PC is off. Lesson: Slow profile load and time drift
Command Prompt: Open Command Prompt (cmd). Lesson: Getting around
Compressed air: Dust cleanup: compressed air blows dust out (outside or with a mask); an electronics-safe vacuum picks it up Lesson: Temperature, humidity and airflow
Configuration: Configuration: turn it on or off per profile and set inbound rules. Lesson: Local OS firewall settings
Configuration management database (CMDB): Configuration management database (CMDB): assets plus their configurations and relationships (this PC uses that printer and that license) Lesson: Asset management
Configuration profiles: Configuration profiles: settings packages (Wi-Fi, VPN, email, restrictions) pushed to the device, usually by MDM Lesson: Hardening techniques
Configuring folder redirection: Configuring folder redirection: Documents or Desktop are stored on a server share, so data is backed up and follows the user Lesson: Policy, groups and redirection
Configuring guest access: Configuring guest access: a separate guest network isolated from business devices Lesson: Wireless and firewall settings
Connectivity issues: Connectivity issues: Bluetooth (re-pair, forget device), Wi-Fi (forget network, toggle airplane mode), NFC (turn it on, case thickness) Lesson: Connectivity and autorotate
Content filtering: Content filtering: block categories of websites Lesson: Router settings
Continuity: Continuity: Mac and iPhone work together (Handoff, AirDrop, Universal Clipboard, calls) Lesson: macOS features
Copy of drive: Copy of drive (data integrity and preservation): work on a forensic copy made with a write blocker; hashes prove the copy matches the original Lesson: Preserving evidence
Corporate-use license: Corporate-use license: business use, often per seat or per device, with volume keys Lesson: Licensing, DRM and EULA
Cp: mv: move or rename; cp: copy (cp -r for folders); rm: remove (rm -r for folders; no Recycle Bin!) Lesson: File management commands
CPU requirements: CPU requirements: speed, cores, sometimes a specific instruction set Lesson: Read the requirements first
Cross-site scripting (XSS): Cross-site scripting (XSS): malicious script injected into a website that runs in other users' browsers Lesson: Password and app attacks
Cryptominer: Cryptominer: uses the CPU/GPU to mine cryptocurrency; high CPU, heat and loud fans Lesson: Malware that spies, steals or extorts
Ctrl+Shift+Esc: Open it with Ctrl+Shift+Esc (or Ctrl+Alt+Del). Lesson: Task Manager tabs
Curl: curl: transfer data to or from a URL; great for testing a web service Lesson: Network commands
D
Data privacy: Compare on data security (where it's stored, who can access it), data source (what it was trained on and what it can reach) and data privacy (whether PII or regulated data is exposed). Lesson: Private vs. public AI
Data retention requirements: Data retention requirements: laws and policy set how long records are kept and when they must be destroyed Lesson: Regulated data
Data security: Compare on data security (where it's stored, who can access it), data source (what it was trained on and what it can reach) and data privacy (whether PII or regulated data is exposed). Lesson: Private vs. public AI
Data source: Compare on data security (where it's stored, who can access it), data source (what it was trained on and what it can reach) and data privacy (whether PII or regulated data is exposed). Lesson: Private vs. public AI
Data-at-rest encryption: Data-at-rest encryption (BitLocker, FileVault) protects a lost or stolen laptop. Lesson: Data-at-rest encryption and passwords
Data-usage limit notification: High network traffic and a data-usage limit notification when the user did little Lesson: Common symptoms
Date and time: A request form captures: purpose of the change (why), scope of the change (what and how much), date and time, affected systems/impact, risk analysis and risk level. Lesson: The change request
DDoS: DDoS (distributed DoS): many sources, often a botnet, flood it at once Lesson: Network attacks
Dedicated graphics card: A dedicated graphics card (discrete GPU) has its own VRAM (video RAM). Lesson: Graphics, VRAM and hardware tokens
Degaussing: Degaussing: a strong magnet erases magnetic media (HDDs, tapes); the HDD is unusable afterward; does NOT work on SSDs or flash Lesson: Physical destruction
Degraded browser performance: Degraded browser performance: slow, high CPU from hidden miners or adware Lesson: Browser-related symptoms
Degraded performance: Degraded performance: check Task Manager and Resource Monitor for the busy resource, trim startup apps, free disk space, scan for malware, install updates. Lesson: Degraded performance and low memory
Degraded response time: Degraded response time: sluggish from hidden activity Lesson: Common symptoms
Deny: An explicit Deny overrides Allow. Lesson: Inheritance and attributes
Dependencies: Services not starting: open services.msc; check the startup type, its dependencies (a service it needs) and the logon account's password. Lesson: Services not starting and apps crashing
Description of issues: Description of issues, categories and severity (impact and urgency) Lesson: What a good ticket holds
Desktop alerts: Desktop alerts and unwanted notifications within the OS: scareware or a site allowed to push notifications Lesson: Common symptoms on the PC
Desktop management software: Desktop management software: inventory, software deployment and remote control for a whole fleet Lesson: Third-party tools
Desktop styles/user interface: Desktop styles/user interface: same core look; business editions add policy-controlled layouts Lesson: Feature differences
Developer mode: Developer mode: unlocks debugging and sideloading; leave it off on work devices Lesson: Security concerns
Device: Device: will it slow the PC, need more storage, or conflict with other software or drivers? Lesson: Impact considerations for new applications
Device encryption: Device encryption: on by default with a screen lock on modern iOS and Android Lesson: Hardening techniques
Device information: User information and device information Lesson: What a good ticket holds
Device Manager: Device Manager: drivers and hardware (same as devmgmt.msc) Lesson: Control Panel applets, part 2
Device Manager (devmgmt.msc): Device Manager (devmgmt.msc): hardware and drivers; update, roll back, disable or uninstall drivers Lesson: Snap-ins, part 1
Devices: Devices: Bluetooth, printers and scanners, mouse, touchpad (Windows 11: Bluetooth & devices) Lesson: More Settings categories
Devices and Printers: Devices and Printers: set the default printer, printer properties, add devices Lesson: Control Panel applets, part 1
Df: df = Disk Free (whole filesystems). Lesson: Informational commands and nano
Dictionary attack: Dictionary attack: tries common words and leaked passwords Lesson: Password and app attacks
Dig: dig: query DNS in detail (like nslookup) Lesson: Network commands
Directory services: Directory services: central database of users and computers (Active Directory) Lesson: Identity and data tools
Disable AutoRun: Disable AutoRun (and AutoPlay) so a USB stick can't launch programs when plugged in Lesson: More hardening steps
Disable guest account: Disable guest account Lesson: Account management
Disable System Restore: Disable System Restore so infected restore points are deleted and can't bring the malware back Lesson: Why each step is where it is
Disable unused services: Disable unused services: every running service is something to attack (e.g. Lesson: More hardening steps
Disabling SSID broadcast: Disabling SSID broadcast: hides the name from casual lists; not real security, it's still discoverable Lesson: Wireless and firewall settings
Disabling unused ports: Firewall: disabling unused ports, and port forwarding/mapping only for services that really need inbound access Lesson: Wireless and firewall settings
Disconnect power before repairing a PC: Disconnect power before repairing a PC: unplug it (and remove the laptop battery if possible). Lesson: Electrical safety
Disk Cleanup (cleanmgr.exe): Disk Cleanup (cleanmgr.exe): delete temp files, Recycle Bin and old update files Lesson: The .exe tools
Disk Defragment (dfrgui.exe): Disk Defragment (dfrgui.exe): Optimize Drives; defragments HDDs, sends TRIM to SSDs Lesson: The .exe tools
Disk Management (diskmgmt.msc): Disk Management (diskmgmt.msc): initialize disks, create, extend, shrink or format volumes, change drive letters Lesson: Snap-ins, part 1
Disk Utility: Disk Utility: First Aid repairs a disk; also erase, format (APFS, exFAT) and partition Lesson: Disk Utility, FileVault, Terminal, Force Quit
Diskpart: diskpart 'clean' wipes the partition table of the SELECTED disk. Lesson: Disk management commands
Dismissing issues: Deal with difficult customers: avoid arguing, being defensive, dismissing issues or being judgmental. Lesson: Listening and difficult customers
Displays: System Preferences (renamed System Settings in macOS 13 Ventura) holds: Displays (resolution, arrangement), Networks (Wi-Fi, Ethernet, VPN), Printers & Scanners, Privacy (Privacy & Security: app access to camera,… Lesson: System Preferences
DLP: DLP (data loss prevention): spots and blocks sensitive data leaving, e.g. Lesson: Identity and data tools
DNS settings: DNS settings: wrong DNS means names fail while IPs work Lesson: Client network configuration
Dock: Finder: the file manager; Dock: the app bar Lesson: macOS features
Domain: In a domain, Active Directory holds central accounts and policy. Lesson: Domain joined vs. workgroup
Domain vs. workgroup: **Domain vs. Lesson: Feature differences
Door locks: Door locks for rooms and equipment locks (cable locks) for laptops and gear Lesson: Keeping people and vehicles out
DoS: DoS (denial of service): one source floods or crashes a service Lesson: Network attacks
Downloadable package: Downloadable package: an installer (.exe, .msi, .msix) from the vendor or a company software portal Lesson: Distribution methods
Drilling: Drilling: holes through the platters; quick but pieces of data may remain between holes Lesson: Physical destruction
DRM: DRM (digital rights management): technology that enforces the license (activation, copy limits) Lesson: Licensing, DRM and EULA
Du: du = Disk Usage (which folders are big). Lesson: Informational commands and nano
Dumpster diving: Dumpster diving: searching trash for papers, sticky notes or old drives Lesson: In-person tricks
Dust cleanup: Dust cleanup: compressed air blows dust out (outside or with a mask); an electronics-safe vacuum picks it up Lesson: Temperature, humidity and airflow
E
Ease of Access: Ease of Access: accessibility (Narrator, Magnifier, high contrast, on-screen keyboard) Lesson: Control Panel applets, part 2
EDR: EDR (endpoint detection and response): an agent records endpoint behavior, detects attacks and can isolate the PC Lesson: Detection and response tools
Educate the end user: Educate the end user: how it got in (that 'free' plugin, that link) and how to avoid it next time Lesson: Finishing the job
EFS: EFS (Encrypting File System): encrypts individual files and folders per user on NTFS; tied to that user's certificate Lesson: BitLocker, BitLocker To Go and EFS
Email: SMS, voice call or email codes: easy, but weaker (SIM swap, mailbox takeover) Lesson: Multifactor authentication (MFA)
Email security gateway: Email security gateway: filters phishing, malicious links and attachments before they reach inboxes Lesson: Detection and response tools
Email systems: Email systems move to a hosted service: mailboxes live in the cloud and users reach them from Outlook, a browser or a phone. Lesson: Email systems and storage
Emergency: Change type: standard (pre-approved, routine, low risk), normal (reviewed and approved by the board), emergency (urgent fix, fast-tracked approval). Lesson: The change request
Enable System Restore: Trap: re-enable System Restore at step 6, AFTER cleaning, never before. Lesson: Finishing the job
enable/disable plug-ins, extensions and features: Admins can enable/disable plug-ins, extensions and features through browser settings or Group Policy: block all extensions except an allow list, turn off features like password saving on shared PCs, and force updates. Lesson: Browser feature management
Encryption settings: Encryption settings: WPA3, or WPA2 with AES Lesson: Wireless and firewall settings
End-of-life (EOL): At end-of-life (EOL) the vendor stops security patches. Lesson: Vendor life-cycle limitations
End-user acceptance: Implementation follows the plan; a peer review has another qualified tech check the change (the plan or script before it goes live, or the result); end-user acceptance confirms it works for the people who use it. Lesson: Approval and implementation
Endpoint security software: Endpoint security software: mobile antivirus and anti-malware, plus content filtering that blocks dangerous or banned sites and apps. Lesson: Patches and endpoint security
Enterprise: The objectives list Windows 10 Home, Pro, Pro for Workstations and Enterprise, and Windows 11 Home, Pro and Enterprise. Lesson: The editions on the exam
EOL: EOL (end-of-life) systems: no more patches from the vendor Lesson: Vulnerabilities
Equipment grounding: Equipment grounding: grounded outlets and three-prong plugs carry fault current away from you. Lesson: Electrical safety
Equipment locks: Door locks for rooms and equipment locks (cable locks) for laptops and gear Lesson: Keeping people and vehicles out
Erasing/wiping: Erasing/wiping: software overwrites every block (or uses the drive's secure-erase command). Lesson: Recycling or repurposing
Escalation levels: Escalation levels: Tier 1 to Tier 2/3 or a vendor when needed Lesson: What a good ticket holds
ESD mats: ESD mats: grounded work surface for parts and the PC Lesson: Electrostatic discharge (ESD)
ESD straps: ESD straps: wrist strap clipped to the PC's unpainted metal frame (or the mat's ground) so you and the PC are at the same potential Lesson: Electrostatic discharge (ESD)
EULA: EULA (end-user license agreement): the terms the user accepts at install Lesson: Licensing, DRM and EULA
Event Viewer (eventvwr.msc): Event Viewer (eventvwr.msc): logs. Lesson: Snap-ins, part 1
Evil twin: Evil twin: a fake access point using a real SSID to capture traffic Lesson: Network attacks
ExFAT: exFAT: made for flash drives and SD cards; large files, reads and writes on Windows and macOS Lesson: Filesystems: the Windows family
Expiration: Expiration: forced periodic changes; current guidance prefers changing after a suspected compromise, but know the setting exists Lesson: Data-at-rest encryption and passwords
Ext4: ext4 (fourth extended filesystem): the default on many Linux distributions, journaling Lesson: Filesystems: Linux and macOS
Extensions and plug-ins: Extensions and plug-ins follow the same rule: official store only, few permissions, approved by IT. Lesson: Installing browsers and extensions
External hardware token: Some licensed apps also need an external hardware token (a USB license dongle) plugged in to run. Lesson: Graphics, VRAM and hardware tokens
External/hot-swappable drive: External/hot-swappable drive: a USB or eSATA drive holding the installer or an image Lesson: More places to boot setup from
external/third-party: Service-level agreements (SLAs): internal (IT to departments) and external/third-party (vendors to us): response and resolution times Lesson: Types of documents
F
FaceTime: iCloud: Apple's cloud; iCloud Drive syncs files; iMessage and FaceTime for messages and calls Lesson: macOS features
Facial recognition: Fingerprint and facial recognition: biometrics through Windows Hello Lesson: Log-in OS options
Facial recognition technology (FRT): Biometrics use something you are: retina scanner, fingerprint scanner, palm print scanner, facial recognition technology (FRT) and voice recognition. Lesson: Biometrics and the environment
Fake security warnings: High number of ads and fake security warnings: adware and scareware Lesson: Common symptoms
FAT32: FAT32: very old, works almost everywhere, but no file can be 4 GB or larger Lesson: Filesystems: the Windows family
Feature update: Windows 11 gets a feature update once a year (versions like 23H2 or 24H2). Lesson: Feature updates and product life cycle
Fences: Fences: mark and protect the perimeter Lesson: Keeping people and vehicles out
File format: Plan for file format, filesystem, app availability and peripheral drivers whenever users share across platforms. Lesson: Compatibility concerns between OSs
File servers: Domains make shared resources easy: printers and file servers are published centrally, and mapped drives arrive by Group Policy or logon script. Lesson: Domain joined vs. workgroup
File transfer software: File transfer software: move files securely (SFTP, managed transfer) Lesson: Third-party tools
Fileless: Fileless: runs in memory using built-in tools like PowerShell; little or nothing written to disk Lesson: Malware that hides or tricks
Filesystem: Plan for file format, filesystem, app availability and peripheral drivers whenever users share across platforms. Lesson: Compatibility concerns between OSs
FileVault: FileVault: full-disk encryption; keep the recovery key safe Lesson: Disk Utility, FileVault, Terminal, Force Quit
Finder: Finder: the file manager; Dock: the app bar Lesson: macOS features
Fingerprint: Fingerprint and facial recognition: biometrics through Windows Hello Lesson: Log-in OS options
Fingerprint scanner: Biometrics use something you are: retina scanner, fingerprint scanner, palm print scanner, facial recognition technology (FRT) and voice recognition. Lesson: Biometrics and the environment
Fire safety: Fire safety: use a Class C (electrical) extinguisher such as CO2 on electrical fires, never water; know the exits Lesson: Personal safety and cables
Firmware updates: Firmware updates: patch the router's own software Lesson: Router settings
Follow up with the customer: Set and meet expectations: agree a timeline, give status communication along the way, explain repair/replacement options, keep proper documentation, and follow up with the customer to confirm they're happy. Lesson: Expectations and confidentiality
Force Quit: Force Quit: Cmd+Option+Esc closes a frozen app (like End task) Lesson: Disk Utility, FileVault, Terminal, Force Quit
Format: format: writes a new filesystem: format E: /fs:ntfs /q (quick) Lesson: Disk management commands
Formatted: After partitioning, each volume is formatted with a filesystem. Lesson: Drive format
Frequency: Backup testing: restore test files regularly; set a frequency (e.g. Lesson: Recovery and testing
Frequent shutdowns: Frequent shutdowns with no warning: usually heat (dusty fans, failed fan) or power (failing power supply). Lesson: Frequent shutdowns and system instability
Fsck: fsck checks and repairs a Linux filesystem, like chkdsk. Lesson: Filesystem management
Full format: A full format also checks every sector and (since Windows Vista) writes zeros over the volume, so it takes much longer. Lesson: Drive format
G
Gaming: Gaming: Game Mode, Xbox Game Bar, captures Lesson: More Settings categories
Gathering of information/data: Gathering of information/data: inventory, disk space, installed software Lesson: Use cases for scripting
General options: General options: open each folder in the same or a new window, single- vs. Lesson: File Explorer Options
Gestures: Gestures: multi-finger trackpad actions Lesson: macOS features
gpedit.msc: BitLocker and gpedit.msc (Local Group Policy Editor): Pro and up Lesson: Feature differences
Gpresult: 'Policy should have mapped my drive but didn't' = gpresult /r to see what applied, then gpupdate /force. Lesson: OS management commands
GPT: GPT (GUID Partition Table): modern, huge disks, many partitions, a backup copy of the table, needed to boot Windows 11 on UEFI Lesson: MBR vs. GPT
Gpupdate: 'Policy should have mapped my drive but didn't' = gpresult /r to see what applied, then gpupdate /force. Lesson: OS management commands
Grandfather-father-son (GFS): Grandfather-father-son (GFS): daily backups (son), weekly (father), monthly (grandfather), each kept for its own period Lesson: Rotation schemes
Grep: grep: search inside files for text (grep -i error /var/log/syslog) Lesson: File management commands
Group Policy Editor (gpedit.msc): Group Policy Editor (gpedit.msc): local policy settings (Pro and up, not Home) Lesson: Snap-ins, part 2
Guest user: Guest user: very limited temporary access; disabled by default Lesson: Users and groups
H
Hallucinations: Hallucinations: invented facts, commands or citations that sound real Lesson: Limitations
Handle confidential materials: Handle confidential materials: don't read papers on desks or files on screens; confidential and private materials stay private. Lesson: Expectations and confidentiality
Hardware compatibility: Hardware compatibility: CPU, TPM, firmware, RAM, storage; run PC Health Check or the vendor's compatibility list Lesson: Upgrade considerations
Hardware token: Hardware token: key fob or USB/NFC security key Lesson: Multifactor authentication (MFA)
Hash: Check the hash: compare the file's SHA-256 with the one the vendor publishes. Lesson: Installing browsers and extensions
Healthcare data: Healthcare data: medical records, protected by laws such as HIPAA in the US Lesson: Regulated data
Hibernate: Hibernate: RAM is saved to disk (hiberfil.sys), then power off; no battery drain, slower wake Lesson: Power Options
High network traffic: High network traffic and a data-usage limit notification when the user did little Lesson: Common symptoms
Home: The objectives list Windows 10 Home, Pro, Pro for Workstations and Enterprise, and Windows 11 Home, Pro and Enterprise. Lesson: The editions on the exam
Hostname: hostname: the computer's name Lesson: Informational commands
Humidity-level awareness: Humidity-level awareness: too dry = static (ESD); too humid = condensation and corrosion; aim for moderate levels (around 50%) Lesson: Temperature, humidity and airflow
I
IAM: IAM (identity and access management): creating, changing and removing identities and their rights Lesson: Identity and data tools
iCloud: iCloud: Apple's cloud; iCloud Drive syncs files; iMessage and FaceTime for messages and calls Lesson: macOS features
iCloud Drive: iCloud: Apple's cloud; iCloud Drive syncs files; iMessage and FaceTime for messages and calls Lesson: macOS features
Identity synchronization: Identity synchronization copies user accounts and password hashes from on-premises Active Directory to the cloud directory (for example, with Microsoft Entra Connect). Lesson: Identity synchronization
Image deployment: Image deployment: build one reference PC, generalize it (Sysprep), capture an image, then copy that image to many PCs Lesson: Deploying many PCs
iMessage: iCloud: Apple's cloud; iCloud Drive syncs files; iMessage and FaceTime for messages and calls Lesson: macOS features
Impersonation: Impersonation: pretending to be IT, a vendor or a boss Lesson: In-person tricks
Implementation: Implementation follows the plan; a peer review has another qualified tech check the change (the plan or script before it goes live, or the result); end-user acceptance confirms it works for the people who use it. Lesson: Approval and implementation
In-place upgrade: In-place upgrade: run setup from inside the current Windows. Lesson: Upgrade paths
in-place/overwrite: Recovery options: in-place/overwrite (restore to the original location, replacing current files) or alternative location (restore elsewhere to compare or avoid overwriting). Lesson: Recovery and testing
Inability to access files: Altered system or personal files: missing or renamed files, or inability to access files (ransomware, encrypted files) Lesson: Common symptoms on the PC
Incident documentation: Incident documentation: what you saw, when, actions taken, who you told Lesson: Preserving evidence
Incident reports: Incident reports: what happened, impact, timeline and follow-up Lesson: Types of documents
Incineration: Incineration: burning, usually by a certified vendor Lesson: Physical destruction
Indexing Options: Indexing Options: which locations Windows Search indexes; rebuild a broken index Lesson: Control Panel applets, part 2
informing management/law enforcement as necessary: Follow the incident response process: report through proper channels, informing management/law enforcement as necessary (management and security decide on law enforcement), and protect the evidence. Lesson: When you find prohibited content
Inheritance: Inheritance: new files and subfolders take the parent folder's NTFS permissions. Lesson: Inheritance and attributes
Initiating updates: Initiating updates across many systems Lesson: Use cases for scripting
Insider threat: Insider threat: an employee or contractor who misuses access, on purpose or by accident Lesson: People and partners
Installation of applications: Installation of applications silently on many PCs Lesson: Use cases for scripting
Instant messaging: Instant messaging: chat, channels and file sharing Lesson: Collaboration tools
Integrated graphics: Integrated graphics are built into the CPU and borrow system RAM. Lesson: Graphics, VRAM and hardware tokens
Internal: Service-level agreements (SLAs): internal (IT to departments) and external/third-party (vendors to us): response and resolution times Lesson: Types of documents
Internet Options: Internet Options: security zones, cookies, proxy (LAN settings), reset browser settings Lesson: Control Panel applets, part 1
Internet-based: Internet-based: download and reinstall from the vendor's cloud (Windows 'Cloud download' reset, macOS Recovery over the internet) Lesson: More places to boot setup from
Inventory lists: Inventory lists: every device, its model and serial number Lesson: Asset management
Investigate and verify: Investigate and verify first: pop-ups could be a bad browser extension, not malware Lesson: Why each step is where it is
iOS: iOS runs on iPhones, iPadOS on iPads (iOS plus multitasking, mouse/keyboard and windowing features). Lesson: Mobile OSs
Ip: ip: show/set addresses and routes (ip addr, ip route); replaces ifconfig Lesson: Network commands
IP addressing scheme: IP addressing scheme: the plan for which addresses go where (e.g. Lesson: Client network configuration
IP filtering: IP filtering: allow or block traffic by IP address Lesson: Router settings
iPadOS: iOS runs on iPhones, iPadOS on iPads (iOS plus multitasking, mouse/keyboard and windowing features). Lesson: Mobile OSs
Ipconfig: ipconfig shows IP settings. Lesson: ipconfig and ping
ipconfig /all: ipconfig /all adds MAC, DNS servers and DHCP info. Lesson: ipconfig and ping
Issue description: Issue description: what the user sees, in plain words, with error text Lesson: Clear, concise written communication
Issue resolution: Issue resolution: the actual fix and how you confirmed it with the user Lesson: Clear, concise written communication
J
Joining a domain: Joining a domain: System > About > Domain or workgroup; needs Pro or higher and domain credentials Lesson: Domain tasks a tech performs
Just-in-time access: Just-in-time access: admin rights granted for a short window, then removed automatically Lesson: Principles
K
Kerberos: Kerberos: ticket-based sign-in for Windows domains; needs clocks in sync (about 5 minutes) Lesson: Authentication servers
Kernel: GRUB) loads the kernel (core that runs hardware and processes), then systemd (first process) starts services Lesson: Configuration files and OS components
Kernel-Power, Event ID 41: Event Viewer logs Kernel-Power, Event ID 41 for an unexpected shutdown. Lesson: Frequent shutdowns and system instability
Key fobs: Key fobs: proximity (RFID) tokens you tap on a reader Lesson: Things you carry
Keychain: Keychain: stores passwords, certificates and keys (Keychain Access app) Lesson: macOS features
Keylogger: Keylogger: records keystrokes to steal passwords Lesson: Malware that spies, steals or extorts
Keys: Keys: cheap and simple, but easy to copy and can't be turned off Lesson: Things you carry
Knowledge base/articles: Knowledge base/articles: known issues and fixes that users and techs can search Lesson: Types of documents
L
Leaked personal files/data: Leaked personal files/data: data shows up where it shouldn't Lesson: Common symptoms
Length: Length: the biggest factor; long passphrases beat short complex ones Lesson: Data-at-rest encryption and passwords
Lifting techniques: Lifting techniques: bend at the knees, keep your back straight, hold the load close, and get help or a cart for heavy items Lesson: Personal safety and cables
Lighting: Good lighting removes hiding places and helps cameras. Lesson: Biometrics and the environment
Linux: CompTIA lists four: Windows (most business PCs), macOS (Apple Macs only), Linux (free, open source, many distributions such as Ubuntu or Fedora) and ChromeOS (Google's Chromebooks, built around the Chrome browser and… Lesson: Workstation OSs
Load driver: Third-party drivers: if setup can't see the drive (RAID, VMD or some NVMe controllers), click Load driver and supply the storage driver from a USB stick Lesson: Fixing instead of replacing
Local account: Local account: exists on one PC. Lesson: Users and groups
Local Users and Groups (lusrmgr.msc): Local Users and Groups (lusrmgr.msc): local accounts and group membership (not in Home) Lesson: Snap-ins, part 2
Location/equipment placement: Location/equipment placement: away from windows, heaters, water pipes and floor-level dust Lesson: Temperature, humidity and airflow
Locator applications: Locator applications: find the device on a map, play a sound, mark it lost Lesson: When a phone is lost
Logical security: Logical security protects data and systems in software. Lesson: Principles
Low memory warnings: Low memory warnings: too many apps or one app leaking memory. Lesson: Degraded performance and low memory
Low-level formatting: Low-level formatting: true low-level format is done at the factory; vendor 'low-level' tools zero-fill the drive Lesson: Recycling or repurposing
Ls: ls: list files (ls -l details, ls -a hidden); pwd: print working directory Lesson: File management commands
M
MacOS: CompTIA lists four: Windows (most business PCs), macOS (Apple Macs only), Linux (free, open source, many distributions such as Ubuntu or Fedora) and ChromeOS (Google's Chromebooks, built around the Chrome browser and… Lesson: Workstation OSs
Magnetometers: Magnetometers (metal detectors) screen people for weapons or hidden devices at entrances. Lesson: Biometrics and the environment
Mail: Mail: Outlook profiles and email accounts (appears when classic Outlook is installed) Lesson: Control Panel applets, part 2
Maintain a positive attitude: Maintain a positive attitude: project confidence, even when you need to look something up Lesson: How you show up
Maintenance window: Work happens inside a maintenance window, and nothing changes during a change freeze (e.g. Lesson: Approval and implementation
Man: man: manual page for a command (man chmod) Lesson: Informational commands and nano
Managed Apple IDs: On company Macs, IT can use Managed Apple IDs and MDM to restrict personal iCloud, block the App Store, require FileVault, or push apps. Lesson: Apple ID and corporate restrictions
Mapped drives: Domains make shared resources easy: printers and file servers are published centrally, and mapped drives arrive by Group Policy or logon script. Lesson: Domain joined vs. workgroup
Material safety data sheets (MSDS): Material safety data sheets (MSDS), now often called SDS, describe a product's hazards, safe handling and disposal, and first aid. Lesson: Safety data sheets and disposal
MBR: MBR (master boot record): legacy, 2 TB limit, four primary partitions Lesson: MBR vs. GPT
Md: md (mkdir): make a directory Lesson: File management commands
MDM: On company Macs, IT can use Managed Apple IDs and MDM to restrict personal iCloud, block the App Store, require FileVault, or push apps. Lesson: Apple ID and corporate restrictions
MDR: MDR (managed detection and response): an outside team watches your EDR alerts 24/7 and responds Lesson: Detection and response tools
Metered connection: Mark a cellular hotspot or capped plan as a metered connection. Lesson: Metered connections and limitations
MFA: MFA needs two or more different factor types: something you know (password), have (phone, token) or are (fingerprint). Lesson: Multifactor authentication (MFA)
Microsoft account: Microsoft account: signs in with an email address and syncs settings through the cloud. Lesson: Users and groups
Minimum: Every app lists minimum and recommended requirements. Lesson: Read the requirements first
Missing or renamed files: Altered system or personal files: missing or renamed files, or inability to access files (ransomware, encrypted files) Lesson: Common symptoms on the PC
Mission Control: Mission Control: shows all open windows and multiple desktops (Spaces) Lesson: macOS features
MMC: MMC (mmc.exe) is a frame that holds snap-ins, the admin tools. Lesson: What MMC is
Mobile digital key: Mobile digital key: a phone or watch acts as the badge (NFC or Bluetooth) Lesson: Things you carry
Mobile OS: Phones and tablets run a mobile OS. Lesson: Mobile OSs
Most restrictive: Over the network, the user gets the most restrictive of the two. Lesson: NTFS vs. share permissions
Motion sensors: Motion sensors: detect movement in an empty room and trigger alarms or lights Lesson: Detecting and recording
Mount: mount attaches a filesystem to a folder (mount /dev/sdb1 /mnt/usb); umount detaches it. Lesson: Filesystem management
Moving objects within organizational units (OUs): Moving objects within organizational units (OUs): OUs organize accounts; moving a user changes which policies apply Lesson: Domain tasks a tech performs
Multiboot: Multiboot puts two or more OSs on one computer, each on its own partition. Lesson: Multiboot
Multifactor: Multifactor: add a second factor (token, app, biometric) to any of these Lesson: Authentication servers
Multiple desktops: Mission Control: shows all open windows and multiple desktops (Spaces) Lesson: macOS features
Mutual NDA (MNDA): A mutual NDA (MNDA) binds both sides, used when two companies share secrets with each other, such as during a partnership. Lesson: NDA and MNDA
Mv: mv: move or rename; cp: copy (cp -r for folders); rm: remove (rm -r for folders; no Recycle Bin!) Lesson: File management commands
N
N versions: N versions (for example, Windows 11 Pro N) are sold mainly in Europe. Lesson: N versions
Nano: nano: simple text editor; Ctrl+O saves, Ctrl+X exits Lesson: Informational commands and nano
Net use: net use: map a share: net use S: \\fs01\shared /persistent:yes; remove with net use S: /delete Lesson: netstat, nslookup, tracert, pathping
Net user: net user: list local accounts; net user rosa shows one account; net user rosa /domain checks a domain account Lesson: Informational commands
Net user rosa: net user: list local accounts; net user rosa shows one account; net user rosa /domain checks a domain account Lesson: Informational commands
net user rosa /domain: net user: list local accounts; net user rosa shows one account; net user rosa /domain checks a domain account Lesson: Informational commands
Netstat: netstat: active connections and listening ports; -a all, -n numeric, -b shows the program (needs admin) Lesson: netstat, nslookup, tracert, pathping
Network: Network: PXE (Preboot eXecution Environment) boot pulls setup from a deployment server; no media needed Lesson: Where setup boots from
Network and Internet: Network and Internet: Wi-Fi, Ethernet, VPN, proxy, mobile hotspot, metered connection, network profile Lesson: More Settings categories
Network and Sharing Center: Network and Sharing Center: network profile, change adapter settings, advanced sharing settings Lesson: Control Panel applets, part 1
Networks: System Preferences (renamed System Settings in macOS 13 Ventura) holds: Displays (resolution, arrangement), Networks (Wi-Fi, Ethernet, VPN), Printers & Scanners, Privacy (Privacy & Security: app access to camera,… Lesson: System Preferences
NFC: Connectivity issues: Bluetooth (re-pair, forget device), Wi-Fi (forget network, toggle airplane mode), NFC (turn it on, case thickness) Lesson: Connectivity and autorotate
No OS found: No OS found (or 'Operating system not found'): check boot order first (a USB stick or disc left in), then whether the drive is detected in UEFI, then repair boot records. Lesson: Boot issues and No OS found
Non-compliant systems: Non-compliant systems: don't meet the company's security baseline Lesson: Vulnerabilities
Non-disclosure agreement (NDA): A non-disclosure agreement (NDA) legally binds one party to keep information confidential (a contractor learning our pricing). Lesson: NDA and MNDA
Normal: Change type: standard (pre-approved, routine, low risk), normal (reviewed and approved by the board), emergency (urgent fix, fast-tracked approval). Lesson: The change request
Nslookup: nslookup. Lesson: netstat, nslookup, tracert, pathping
NTFS: NTFS: the Windows standard. Lesson: Filesystems: the Windows family
NTFS permissions: NTFS permissions (Full control, Modify, Read & execute, List folder contents, Read, Write) apply both locally and over the network. Lesson: NTFS vs. share permissions
O
On-path attack: On-path attack: attacker sits between two parties, reading or changing traffic (formerly man-in-the-middle) Lesson: Network attacks
Onsite vs. offsite: **Onsite vs. Lesson: Rotation schemes
Open-ended questions: Use clarifying statements, open-ended questions and restate the issue to confirm. Lesson: Listening and difficult customers
Open-source license: Open-source license: source code available; free to use under terms such as attribution or sharing changes Lesson: Licensing, DRM and EULA
Operation: Operation: training, support load, changes to how people work Lesson: Impact considerations for new applications
Order of volatility: Order of volatility: collect the most short-lived data first: CPU cache and registers, then RAM, then swap/temp files, then disk, then remote logs and backups Lesson: Preserving evidence
OS fails to update: OS fails to update: not enough storage, low battery (plug in), no Wi-Fi, or the device is no longer supported Lesson: Device problems
OS reinstallation: OS reinstallation: when the infection is deep (rootkit) or the PC can't be trusted, wipe and reinstall or reimage Lesson: Recovery and prevention methods
OS update failures: OS update failures: malware often blocks Windows Update and security tools Lesson: Common symptoms on the PC
OS updates: Patch management: install OS updates and application updates promptly; MDM can enforce a minimum OS version. Lesson: Patches and endpoint security
OTP: OTP (one-time password/passcode): a code good for one use Lesson: Multifactor authentication (MFA)
P
Palm print scanner: Biometrics use something you are: retina scanner, fingerprint scanner, palm print scanner, facial recognition technology (FRT) and voice recognition. Lesson: Biometrics and the environment
Partition table: A partition table describes how the disk is divided. Lesson: MBR vs. GPT
Password considerations: Password considerations: Lesson: Data-at-rest encryption and passwords
Password managers: Password managers: built in or standalone, they create and store unique passwords and won't autofill on a fake domain. Lesson: Patching, passwords and certificates
Passwordless/Windows Hello: Passwordless/Windows Hello: PIN or biometrics replace the password entirely Lesson: Log-in OS options
Patch management: Patch management: install OS updates and application updates promptly; MDM can enforce a minimum OS version. Lesson: Patches and endpoint security
Pathping: pathping. Lesson: netstat, nslookup, tracert, pathping
Pattern: Screen locks: facial recognition, fingerprint, PIN codes, pattern and swipe. Lesson: Hardening techniques
Peer review: Implementation follows the plan; a peer review has another qualified tech check the change (the plan or script before it goes live, or the result); end-user acceptance confirms it works for the people who use it. Lesson: Approval and implementation
Per user: Cloud suites are usually licensed per user. Lesson: Licensing assignment
Performance: Performance: live graphs for CPU, memory, disk, network and GPU; link to Resource Monitor Lesson: Task Manager tabs
Performance Monitor (perfmon.msc): Performance Monitor (perfmon.msc): counters over time, data collector sets, reports for baselines Lesson: Snap-ins, part 2
Peripheral drivers: Plan for file format, filesystem, app availability and peripheral drivers whenever users share across platforms. Lesson: Compatibility concerns between OSs
Perpetual license agreement: Perpetual license agreement: pay once, use that version forever (updates may cost extra) Lesson: Licensing, DRM and EULA
Personal calls: Avoid distractions: no personal calls, texting/social media sites or personal interruptions while with a customer. Lesson: Listening and difficult customers
Personal government-issued information: Personal government-issued information: Social Security, passport and driver's license numbers Lesson: Regulated data
Personal interruptions: Avoid distractions: no personal calls, texting/social media sites or personal interruptions while with a customer. Lesson: Listening and difficult customers
Personal-use license: Personal-use license: home use only; not allowed in business Lesson: Licensing, DRM and EULA
Personalization: Personalization: background, colors, themes, lock screen, Start, taskbar Lesson: Windows Settings categories
Phishing: Phishing: fake emails that lure clicks or logins Lesson: Phishing and its cousins
Physical media vs. mountable ISO file: **Physical media vs. Lesson: Distribution methods
Physical placement/secure locations: Physical placement/secure locations: lock it away so nobody can press reset Lesson: Router settings
Physical security: Physical security protects buildings and equipment. Lesson: Keeping people and vehicles out
PII: PII (personally identifiable information): names, addresses, birthdates, emails that identify a person Lesson: Regulated data
PIN: PIN: tied to that one device and the TPM, so a stolen PIN is useless elsewhere Lesson: Log-in OS options
PIN codes: Screen locks: facial recognition, fingerprint, PIN codes, pattern and swipe. Lesson: Hardening techniques
Ping: ping tests reachability with ICMP echo; ping -t runs until you press Ctrl+C. Lesson: ipconfig and ping
Ping -t: ping tests reachability with ICMP echo; ping -t runs until you press Ctrl+C. Lesson: ipconfig and ping
Plagiarism: It also covers plagiarism: AI output may copy others' work or can't be passed off as fully original where that matters, so users must review, cite and take responsibility for what they publish. Lesson: Policy
Pop-up blocker: Pop-up blocker: on by default; allow exceptions only for trusted sites Lesson: Browser settings
port forwarding/mapping: Firewall: disabling unused ports, and port forwarding/mapping only for services that really need inbound access Lesson: Wireless and firewall settings
Port security: Port security: an inbound or outbound rule for a specific port and protocol, e.g. Lesson: Windows Defender Firewall
Power plans: Power plans: Balanced, Power saver, High performance, or custom Lesson: Power Options
Power user: Power user: legacy group kept for backward compatibility; has no extra rights in modern Windows Lesson: Users and groups
Preinstallation environment: Scan in safe mode or from a preinstallation environment (WinPE boot media) so the malware isn't running Lesson: Why each step is where it is
Present a professional appearance: Present a professional appearance: match the setting's attire: formal for executive meetings, business casual for most office visits Lesson: How you show up
Presentation tools: Word processing, spreadsheets and presentation tools with real-time co-editing and version history Lesson: Collaboration tools
Printers: Domains make shared resources easy: printers and file servers are published centrally, and mapped drives arrive by Group Policy or logon script. Lesson: Domain joined vs. workgroup
Printers & Scanners: System Preferences (renamed System Settings in macOS 13 Ventura) holds: Displays (resolution, arrangement), Networks (Wi-Fi, Ethernet, VPN), Printers & Scanners, Privacy (Privacy & Security: app access to camera,… Lesson: System Preferences
Privacy: Privacy: app access to camera, microphone and location; diagnostic data Lesson: Windows Settings categories
Private: Windows Defender Firewall has three profiles: Domain, Private and Public. Lesson: Local OS firewall settings
Private AI: Private AI: company-hosted models, or enterprise contracts that keep data inside your tenant. Lesson: Private vs. public AI
Private network: Private network: discovery on; use for trusted home or office networks Lesson: Proxy, network profiles and paths
Private-browsing mode: Private-browsing mode: no local history or cookies kept after closing; NOT anonymous to the network Lesson: Browser settings
Privileged access management (PAM): Privileged access management (PAM): vaults, checks out and records admin credentials Lesson: Principles
Pro: The objectives list Windows 10 Home, Pro, Pro for Workstations and Enterprise, and Windows 11 Home, Pro and Enterprise. Lesson: The editions on the exam
Pro for Workstations: The objectives list Windows 10 Home, Pro, Pro for Workstations and Enterprise, and Windows 11 Home, Pro and Enterprise. Lesson: The editions on the exam
Processes: Processes: every app and background process with CPU, memory, disk and network use; End task kills a frozen one Lesson: Task Manager tabs
Procurement life cycle: Procurement life cycle: request, purchase, deploy, maintain, retire, dispose Lesson: Asset management
Product life cycle: Track the product life cycle so no PC drifts off support. Lesson: Feature updates and product life cycle
Professional titles and designations: Be culturally sensitive: use professional titles and designations (Dr., Mr. Lesson: How you show up
Profile security requirements: Profile security requirements: the rules a device must meet (passcode, OS version, not rooted) before it can reach email or apps. Lesson: Policies and procedures
Programs and Features: Programs and Features: uninstall or repair apps; 'Turn Windows features on or off' (Hyper-V, IIS) Lesson: Control Panel applets, part 1
Progress notes: Progress notes: what you tried, when, and the result Lesson: Clear, concise written communication
Proper battery disposal: Proper battery disposal: recycle lithium-ion and other batteries through approved programs; never trash them Lesson: Safety data sheets and disposal
Proper documentation: Set and meet expectations: agree a timeline, give status communication along the way, explain repair/replacement options, keep proper documentation, and follow up with the customer to confirm they're happy. Lesson: Expectations and confidentiality
Proper toner disposal: Proper toner disposal: return or recycle cartridges; clean spills with a toner vacuum, not a regular one Lesson: Safety data sheets and disposal
Proper ventilation: Proper ventilation: clear airflow in and out of racks and cases Lesson: Temperature, humidity and airflow
Proxy: A proxy server makes web requests on the user's behalf for filtering and caching. Lesson: Proxy, network profiles and paths
Ps: ps: snapshot of running processes (ps aux) Lesson: Informational commands and nano
Public: Windows Defender Firewall has three profiles: Domain, Private and Public. Lesson: Local OS firewall settings
Public AI: Public AI: consumer tools on the internet; what you type may be stored or used to train models, outside your control. Lesson: Private vs. public AI
Public network: Public network: network discovery and file sharing off; use for coffee shops and hotels Lesson: Proxy, network profiles and paths
Punctuality: Be on time (punctuality); contact the customer if you'll be late Lesson: How you show up
Purpose of the change: A request form captures: purpose of the change (why), scope of the change (what and how much), date and time, affected systems/impact, risk analysis and risk level. Lesson: The change request
Pwd: ls: list files (ls -l details, ls -a hidden); pwd: print working directory Lesson: File management commands
Q
QR code phishing: QR code phishing: a QR code (on a flyer or email) leads to a fake login page Lesson: Phishing and its cousins
Quality updates: Monthly quality updates (Patch Tuesday) fix bugs and security issues. Lesson: Feature updates and product life cycle
Quarantine: Quarantine before cleaning: disconnect from the network (pull the cable, turn off Wi-Fi) so it can't spread; don't plug in shared USB drives Lesson: Why each step is where it is
Quick format: A quick format just writes a new empty filesystem. Lesson: Drive format
R
RADIUS: RADIUS: the standard for Wi-Fi (802.1X), VPN and network logins; UDP; encrypts only the password Lesson: Authentication servers
RAM requirements: RAM requirements: minimum memory; recommended is what actually feels usable Lesson: Read the requirements first
RAM support limitations: RAM support limitations: Home tops out at 128 GB Lesson: Feature differences
Random reboots: Random reboots: overheating, a failing battery, a faulty app or OS bug; check updates and battery health Lesson: Device problems
Random/frequent pop-ups: Random/frequent pop-ups Lesson: Browser-related symptoms
Ransomware: Ransomware: encrypts files and demands payment Lesson: Malware that spies, steals or extorts
Rapid Security Response (RSR): Rapid Security Response (RSR): small, fast security fixes delivered between full macOS updates Lesson: macOS best practices
RDP: RDP: every edition has the Remote Desktop client; only Pro and up can be the host you connect to Lesson: Feature differences
Recommended: Every app lists minimum and recommended requirements. Lesson: Read the requirements first
Recovery: Recovery options: in-place/overwrite (restore to the original location, replacing current files) or alternative location (restore elsewhere to compare or avoid overwriting). Lesson: Recovery and testing
Recovery console: Recovery console: the Windows Recovery Environment (WinRE) command prompt; repair boot files, run offline tools Lesson: Recovery and prevention methods
Recovery key: A big hardware or firmware change triggers a request for the 48-digit recovery key Lesson: BitLocker, BitLocker To Go and EFS
Recovery partition: Recovery partition: a hidden partition with the maker's factory image or Windows RE tools; restores the PC without outside media Lesson: Fixing instead of replacing
Redirection: Redirection: searches or home page go to unexpected sites (browser hijacker, changed DNS or hosts file) Lesson: Browser-related symptoms
ReFS: ReFS (Resilient File System): built for data integrity and very large volumes, used with Storage Spaces; Windows Server and Pro for Workstations Lesson: Filesystems: the Windows family
Registry Editor (regedit.exe): Registry Editor (regedit.exe): edit the registry database of settings (HKLM, HKCU) Lesson: The .exe tools
Reimage/reinstall: Reimage/reinstall when it can't be cleaned Lesson: Why each step is where it is
Remapping network drives: Remapping network drives after a server move Lesson: Use cases for scripting
Remote backup applications: Remote backup applications: cloud backup so a wipe doesn't lose data Lesson: When a phone is lost
Remote network installation: Remote network installation: PCs boot from the network (PXE) and pull setup or an image from a deployment server Lesson: Deploying many PCs
Remote wipes: Remote wipes: erase the device (or just company data) from the console Lesson: When a phone is lost
Repair installation: Repair installation: reinstall Windows over itself, keeping files and apps; fixes corrupted system files when sfc can't Lesson: Fixing instead of replacing
repair/replacement options: Set and meet expectations: agree a timeline, give status communication along the way, explain repair/replacement options, keep proper documentation, and follow up with the customer to confirm they're happy. Lesson: Expectations and confidentiality
Request form: A request form captures: purpose of the change (why), scope of the change (what and how much), date and time, affected systems/impact, risk analysis and risk level. Lesson: The change request
Resource Monitor (resmon.exe): Resource Monitor (resmon.exe): per-process detail on CPU, memory, disk and network; which file a process is hammering Lesson: The .exe tools
Responsible staff members: Responsible staff members: who does the work and who owns the result Lesson: Documented business processes
Restarting machines: Restarting machines on a schedule Lesson: Use cases for scripting
Restate the issue: Use clarifying statements, open-ended questions and restate the issue to confirm. Lesson: Listening and difficult customers
Restrict log-in times: Restrict log-in times: the warehouse temp account only works during shifts Lesson: Account management
Restrict user permissions: Restrict user permissions: standard accounts, least privilege Lesson: Account management
Retina scanner: Biometrics use something you are: retina scanner, fingerprint scanner, palm print scanner, facial recognition technology (FRT) and voice recognition. Lesson: Biometrics and the environment
Risk analysis: A request form captures: purpose of the change (why), scope of the change (what and how much), date and time, affected systems/impact, risk analysis and risk level. Lesson: The change request
Risk level: A request form captures: purpose of the change (why), scope of the change (what and how much), date and time, affected systems/impact, risk analysis and risk level. Lesson: The change request
Rm: mv: move or rename; cp: copy (cp -r for folders); rm: remove (rm -r for folders; no Recycle Bin!) Lesson: File management commands
Rmdir: rmdir (rd): remove a directory; /s removes everything inside it, /q skips the prompt Lesson: File management commands
RMM: RMM (remote monitoring and management): agents on every PC for monitoring, patching and scripts at scale, used by IT teams and MSPs Lesson: Methods and tools
Robocopy: robocopy: Robust File Copy for big jobs. Lesson: File management commands
Rollback plan: Rollback plan: how to undo the change if it fails Lesson: Documented business processes
Root access/jailbreak: Root access/jailbreak: removes OS protections; most MDM blocks rooted/jailbroken devices Lesson: Security concerns
Root account: The root account is the superuser (UID 0) and can do anything. Lesson: Administrative: su and sudo
Rootkit: Rootkit: hides deep in the OS or firmware with high privileges, concealing itself and other malware Lesson: Malware that hides or tricks
Run as administrator: Some commands need Run as administrator (an elevated prompt). Lesson: Getting around
S
Safe Mode: Fixes: boot Safe Mode, roll back or update the driver in Device Manager, run Windows Memory Diagnostic, use System Restore, check the minidump and Event Viewer. Lesson: Blue screen of death (BSOD)
Safety goggles: Safety goggles when cutting, crimping or using compressed air; an air filter mask for dust and toner Lesson: Personal safety and cables
SAML: SAML: the standard many web apps use to accept an SSO login from the identity provider Lesson: Identity and data tools
Sandbox testing: Sandbox testing: try it first in an isolated test environment Lesson: Documented business processes
Schedule scans and run updates: Schedule scans and run updates: OS patches, app updates and regular automatic scans Lesson: Finishing the job
Scope of the change: A request form captures: purpose of the change (why), scope of the change (what and how much), date and time, affected systems/impact, risk analysis and risk level. Lesson: The change request
Screen locks: Screen locks: facial recognition, fingerprint, PIN codes, pattern and swipe. Lesson: Hardening techniques
Screen-sharing software: Screen-sharing software: view or control a user's screen with their consent Lesson: Third-party tools
Screened subnet: Screened subnet: an isolated segment for public-facing devices (formerly DMZ) Lesson: Router settings
Secure Boot: Minimums: 64-bit CPU at 1 GHz with 2+ cores on the supported list, 4 GB RAM, 64 GB storage, DirectX 12 graphics, a 720p display over 9 inches, UEFI firmware with Secure Boot capable, and TPM 2.0 (Trusted Platform… Lesson: Hardware requirements (Windows 11)
Secure connections/sites: Secure connections/sites: HTTPS with a valid certificate (trusted issuer, not expired, matching the site name). Lesson: Patching, passwords and certificates
Secure desktop: The dimmed secure desktop blocks other apps from clicking for you. Lesson: Run as administrator and UAC
Secure DNS: Secure DNS: DNS over HTTPS encrypts lookups Lesson: Browser settings
Secure PII and passwords: Secure PII and passwords: no sticky notes, no spreadsheets of passwords Lesson: End-user best practices
Secure/protect critical hardware: Secure/protect critical hardware: cable locks for laptops, never leave them in cars Lesson: End-user best practices
Security guards: Security guards: people who verify IDs, check visitors and respond Lesson: Keeping people and vehicles out
Selecting security groups: Selecting security groups: grant access to groups, not individuals; add the user to the group Lesson: Policy, groups and redirection
Service-level agreements (SLAs): Service-level agreements (SLAs): internal (IT to departments) and external/third-party (vendors to us): response and resolution times Lesson: Types of documents
Services: Services: start, stop or restart Windows services, plus a link to the full Services console Lesson: Task Manager tabs
Services not starting: Services not starting: open services.msc; check the startup type, its dependencies (a service it needs) and the logon account's password. Lesson: Services not starting and apps crashing
Severity: Description of issues, categories and severity (impact and urgency) Lesson: What a good ticket holds
sfc /scannow: sfc /scannow: System File Checker; scans protected Windows files and replaces corrupted ones (needs an elevated prompt) Lesson: OS management commands
Share permissions: Share permissions (Read, Change, Full Control) apply ONLY when connecting over the network. Lesson: NTFS vs. share permissions
Shared resources: Domains make shared resources easy: printers and file servers are published centrally, and mapped drives arrive by Group Policy or logon script. Lesson: Domain joined vs. workgroup
Shoulder surfing: Shoulder surfing: watching someone type a password or PIN Lesson: In-person tricks
Show hidden files: View options: Show hidden files, folders and drives, and uncheck Hide extensions for known file types. Lesson: File Explorer Options
Shredding: Shredding: industrial shredder cuts drives into small pieces; works for HDDs and SSDs Lesson: Physical destruction
Sign-in/browser data synchronization: Sign-in/browser data synchronization: syncs bookmarks and passwords across devices; keep work and personal profiles separate Lesson: Browser settings
Sleep/suspend: Sleep/suspend (also called standby): RAM stays powered; fast wake, small battery drain Lesson: Power Options
Slow profile load: Slow profile load: a large roaming profile copying over the network, a slow link, a corrupted profile or heavy logon scripts. Lesson: Slow profile load and time drift
Slow to respond: Slow to respond: low storage, too many background apps; restart, free space, update Lesson: Device problems
Smart cards: Smart cards: badges with a chip holding a certificate; also used for logging in to PCs Lesson: Things you carry
Smishing: Smishing: phishing by SMS text message Lesson: Phishing and its cousins
SMS: SMS, voice call or email codes: easy, but weaker (SIM swap, mailbox takeover) Lesson: Multifactor authentication (MFA)
Snap-ins: MMC (mmc.exe) is a frame that holds snap-ins, the admin tools. Lesson: What MMC is
Social engineering: Social engineering tricks people instead of hacking machines. Lesson: Phishing and its cousins
Software firewalls: Software firewalls: block unwanted traffic on each host Lesson: Detection and response tools
Software package custom installation procedure: a software package custom installation procedure Lesson: Types of documents
Solid-state/flash drives: Solid-state/flash drives: any bootable SSD or flash media Lesson: Where setup boots from
Sound: Sound: playback and recording devices, default speaker/mic Lesson: Control Panel applets, part 2
Spear phishing: Spear phishing: phishing aimed at one person or team, using real details Lesson: Phishing and its cousins
SPICE: SPICE: remote display protocol for virtual machines (e.g. Lesson: Methods and tools
Splash screens: Splash screens (logon banners) remind users of the AUP and that systems are monitored, before they sign in. Lesson: AUP and compliance
Spoofing: Spoofing: faking an identity: email sender, IP address, MAC address or caller ID Lesson: Network attacks
Spotlight: Spotlight: system-wide search, Cmd+Space Lesson: macOS features
Spreadsheets: Word processing, spreadsheets and presentation tools with real-time co-editing and version history Lesson: Collaboration tools
Spyware: Spyware: watches activity and sends data out Lesson: Malware that spies, steals or extorts
SQL injection: SQL injection: database commands typed into a web form or URL Lesson: Password and app attacks
SSH: SSH (Secure Shell, TCP 22): encrypted command line, mainly Linux, macOS and network gear Lesson: Methods and tools
SSO: SSO (single sign-on): sign in once, reach many apps Lesson: Identity and data tools
Stalkerware: Stalkerware: hidden monitoring app, often on phones, installed by someone the victim knows Lesson: Malware that spies, steals or extorts
Standard: Change type: standard (pre-approved, routine, low risk), normal (reviewed and approved by the board), emergency (urgent fix, fast-tracked approval). Lesson: The change request
Standard account: Standard account: everyday use; can't change system-wide settings without an admin's credentials Lesson: Users and groups
Standard formatting: Standard formatting: builds a new filesystem; a quick format leaves the old data recoverable Lesson: Recycling or repurposing
Standard operating procedures (SOPs): Standard operating procedures (SOPs): step-by-step instructions, e.g. Lesson: Types of documents
Standby: Sleep/suspend (also called standby): RAM stays powered; fast wake, small battery drain Lesson: Power Options
Startup: Startup (Startup apps): what launches at sign-in, with a Startup impact rating; disable the heavy ones Lesson: Task Manager tabs
Startup Repair: Use Startup Repair in WinRE, Safe Mode or System Restore. Lesson: Boot issues and No OS found
Static vs. dynamic: **Static vs. Lesson: Client network configuration
Status communication: Set and meet expectations: agree a timeline, give status communication along the way, explain repair/replacement options, keep proper documentation, and follow up with the customer to confirm they're happy. Lesson: Expectations and confidentiality
Stop code: Note the stop code (e.g. Lesson: Blue screen of death (BSOD)
Storage: Storage moves to cloud drives: users sync folders to the PC. Lesson: Email systems and storage
Storage requirements: Storage requirements: install size plus room for data, caches and updates Lesson: Read the requirements first
Su: The root account is the superuser (UID 0) and can do anything. Lesson: Administrative: su and sudo
Sudo: sudo runs one command as root using YOUR password, if /etc/sudoers allows it, and logs it. Lesson: Administrative: su and sudo
Supply chain/pipeline attack: Supply chain/pipeline attack: attackers compromise a vendor, software update or build pipeline to reach many customers Lesson: People and partners
Swipe: Screen locks: facial recognition, fingerprint, PIN codes, pattern and swipe. Lesson: Hardening techniques
Sync/folder settings: Sync/folder settings decide which folders sync, whether files stay online-only to save disk, and backup of Desktop/Documents. Lesson: Email systems and storage
System: System: computer name, edition, activation; advanced settings for virtual memory and Remote Desktop Lesson: Control Panel applets, part 1
System Configuration (msconfig.exe): System Configuration (msconfig.exe): boot options (Safe boot), selective startup, services (hide Microsoft services) Lesson: The .exe tools
System Information (msinfo32.exe): System Information (msinfo32.exe): full hardware and software inventory: BIOS version, RAM, drivers Lesson: The .exe tools
System instability: System instability (freezes, random errors): drivers, failing RAM or disk, overheating, corrupted system files. Lesson: Frequent shutdowns and system instability
System Preferences: System Preferences (renamed System Settings in macOS 13 Ventura) holds: Displays (resolution, arrangement), Networks (Wi-Fi, Ethernet, VPN), Printers & Scanners, Privacy (Privacy & Security: app access to camera,… Lesson: System Preferences
Systemd: GRUB) loads the kernel (core that runs hardware and processes), then systemd (first process) starts services Lesson: Configuration files and OS components
T
TACACS+: TACACS+: Cisco-designed, TCP 49; encrypts the whole session and separates authentication, authorization and accounting; ideal for admin logins to switches and routers Lesson: Authentication servers
Tailgating: Tailgating: following an authorized person through a secure door Lesson: In-person tricks
Task Scheduler (taskschd.msc): Task Scheduler (taskschd.msc): run programs or scripts on a schedule or on an event (at logon, at startup) Lesson: Snap-ins, part 1
Temperature: Temperature: heat shortens component life and causes shutdowns Lesson: Temperature, humidity and airflow
Terminal: Terminal: the command line (zsh shell) Lesson: Disk Utility, FileVault, Terminal, Force Quit
texting/social media sites: Avoid distractions: no personal calls, texting/social media sites or personal interruptions while with a customer. Lesson: Listening and difficult customers
Third-party drivers: Third-party drivers: if setup can't see the drive (RAID, VMD or some NVMe controllers), click Load driver and supply the storage driver from a USB stick Lesson: Fixing instead of replacing
Third-party tools: Beyond built-in protocols, third-party tools fill four roles: Lesson: Third-party tools
Third-party vendor: Large jobs often go to a third-party vendor. Lesson: Outsourcing and regulations
Time and Language: Time and Language: time zone, auto clock sync, region, language packs Lesson: Windows Settings categories
Time drift: Time drift: the clock slowly wanders. Lesson: Slow profile load and time drift
Time Machine: System Preferences (renamed System Settings in macOS 13 Ventura) holds: Displays (resolution, arrangement), Networks (Wi-Fi, Ethernet, VPN), Printers & Scanners, Privacy (Privacy & Security: app access to camera,… Lesson: System Preferences
Timeline: Set and meet expectations: agree a timeline, give status communication along the way, explain repair/replacement options, keep proper documentation, and follow up with the customer to confirm they're happy. Lesson: Expectations and confidentiality
TKIP: TKIP: old stopgap encryption from the original WPA; weak Lesson: Protocols and encryption
Toner vacuum: Proper toner disposal: return or recycle cartridges; clean spills with a toner vacuum, not a regular one Lesson: Safety data sheets and disposal
Top: top: live view of processes, CPU and memory (like Task Manager) Lesson: Informational commands and nano
TOTP: TOTP (time-based one-time password): a code that changes every 30 seconds Lesson: Multifactor authentication (MFA)
TPM 2.0: Minimums: 64-bit CPU at 1 GHz with 2+ cores on the supported list, 4 GB RAM, 64 GB storage, DirectX 12 graphics, a 720p display over 9 inches, UEFI firmware with Secure Boot capable, and TPM 2.0 (Trusted Platform… Lesson: Hardware requirements (Windows 11)
Traceroute: traceroute: hop-by-hop path (Windows: tracert) Lesson: Network commands
Tracert: tracert. Lesson: netstat, nslookup, tracert, pathping
Trojan: Trojan: pretends to be useful software (a free PDF tool) but carries malware Lesson: Malware that hides or tricks
Trusted sources: Browser download/installation: get it only from trusted sources (the vendor's site or the company software portal). Lesson: Installing browsers and extensions
U
Umount: mount attaches a filesystem to a folder (mount /dev/sdb1 /mnt/usb); umount detaches it. Lesson: Filesystem management
Unauthorized/malicious application: Unauthorized/malicious application: application spoofing copies a real app's name and icon to trick users Lesson: Security concerns
Unexpected application behavior: Unexpected application behavior: apps opening, sending messages or asking for new permissions Lesson: Common symptoms
Unintentionally introducing malware: Unintentionally introducing malware: copied scripts from forums or AI can hide malicious code; review every line and use trusted sources Lesson: Other considerations when using scripts
Uniqueness: Uniqueness: never reuse a password between sites or accounts Lesson: Data-at-rest encryption and passwords
Universal Plug and Play (UPnP): Universal Plug and Play (UPnP): lets devices open ports automatically; disable it unless needed Lesson: Router settings
Unpatched systems: Unpatched systems: missing OS or app updates Lesson: Vulnerabilities
Unprotected systems: Unprotected systems: missing antivirus or firewall Lesson: Vulnerabilities
Untrusted sources: Untrusted sources (pop-up 'update your browser' sites) are a classic trojan route. Lesson: Installing browsers and extensions
Unwanted notifications within the OS: Desktop alerts and unwanted notifications within the OS: scareware or a site allowed to push notifications Lesson: Common symptoms on the PC
Update and Security: Update and Security: Windows Update, Windows Security, backup, recovery, activation (Windows 11: Windows Update and Privacy & security) Lesson: Windows Settings categories
Update anti-malware: Update anti-malware before scanning, so it knows the newest threats Lesson: Why each step is where it is
Update definitions: Update definitions: 'security intelligence' updates arrive through Windows Update, or click Check for updates. Lesson: Microsoft Defender Antivirus
Update limitations: Update limitations come first: older hardware may not get the next version (for example, a phone that no longer receives OS updates, or a PC that fails the Windows 11 check). Lesson: Vendor life-cycle limitations
Updates/patches: Updates/patches: System Settings > General > Software Update Lesson: macOS best practices
Upgrade: Upgrade (in-place): run setup inside the old OS; files, settings and apps stay. Lesson: Clean install vs. upgrade
USB: USB: a bootable flash drive made with the Media Creation Tool; the most common method Lesson: Where setup boots from
USB selective suspend: USB selective suspend: powers down idle USB ports to save battery; can make USB devices drop out Lesson: Power Options
Use password managers: Use password managers for unique, strong passwords Lesson: End-user best practices
Use proper language: Use proper language: avoid jargon, acronyms and slang Lesson: How you show up
Use screensaver locks: Use screensaver locks and lock the PC when walking away (Win+L) Lesson: End-user best practices
Use timeout/screen lock: Use timeout/screen lock: lock automatically after a few idle minutes Lesson: Account management
User Account Control (UAC): User Account Control (UAC) prompts before changes that need admin rights: admins click Yes (consent); standard users must type admin credentials. Lesson: Run as administrator and UAC
User Accounts: User Accounts: change account type, manage credentials (Credential Manager) Lesson: Control Panel applets, part 2
User information: User information and device information Lesson: What a good ticket holds
User off-boarding checklist: User off-boarding checklist: disable accounts, collect devices, reclaim licenses, transfer data Lesson: Types of documents
Username and password: Username and password: the classic Lesson: Log-in OS options
Users: Users: who is signed in and what each uses; sign a user out Lesson: Task Manager tabs
V
Vacuum: Dust cleanup: compressed air blows dust out (outside or with a mask); an electronics-safe vacuum picks it up Lesson: Temperature, humidity and airflow
Valid certificate: Secure connections/sites: HTTPS with a valid certificate (trusted issuer, not expired, matching the site name). Lesson: Patching, passwords and certificates
Valid licenses: Valid licenses: every install must be covered; audits check counts Lesson: Licensing, DRM and EULA
Video surveillance: Video surveillance: cameras that deter and record (CCTV) Lesson: Detecting and recording
Videoconferencing: Videoconferencing: meetings, screen sharing, recordings Lesson: Collaboration tools
Videoconferencing software: Videoconferencing software: meetings with screen sharing and remote control Lesson: Third-party tools
View options: View options: Show hidden files, folders and drives, and uncheck Hide extensions for known file types. Lesson: File Explorer Options
Virus: Virus: attaches to files or programs and spreads when they run Lesson: Malware that hides or tricks
Virus & threat protection: Built into Windows, managed in Windows Security > Virus & threat protection. Lesson: Microsoft Defender Antivirus
Vishing: Vishing: voice phishing over the phone Lesson: Phishing and its cousins
VNC: VNC (Virtual Network Computing): screen sharing across platforms; often weak encryption on its own Lesson: Methods and tools
Voice call: SMS, voice call or email codes: easy, but weaker (SIM swap, mailbox takeover) Lesson: Multifactor authentication (MFA)
Voice recognition: Biometrics use something you are: retina scanner, fingerprint scanner, palm print scanner, facial recognition technology (FRT) and voice recognition. Lesson: Biometrics and the environment
VPN: VPN: add a VPN connection (server, protocol, sign-in) to reach the office securely from outside Lesson: Establish network connections
VRAM: A dedicated graphics card (discrete GPU) has its own VRAM (video RAM). Lesson: Graphics, VRAM and hardware tokens
W
Warranty and licensing: Warranty and licensing: expiry dates and license counts Lesson: Asset management
Whaling: Whaling: spear phishing aimed at executives (Mr. Lesson: Phishing and its cousins
Whoami: whoami: the signed-in account (domain\user); whoami /groups shows group membership Lesson: Informational commands
whoami /groups: whoami: the signed-in account (domain\user); whoami /groups shows group membership Lesson: Informational commands
Wi-Fi: Connectivity issues: Bluetooth (re-pair, forget device), Wi-Fi (forget network, toggle airplane mode), NFC (turn it on, case thickness) Lesson: Connectivity and autorotate
Win+I: Open with Win+I. Lesson: Windows Settings categories
Windows: CompTIA lists four: Windows (most business PCs), macOS (Apple Macs only), Linux (free, open source, many distributions such as Ubuntu or Fedora) and ChromeOS (Google's Chromebooks, built around the Chrome browser and… Lesson: Workstation OSs
Windows Defender Firewall: Windows Defender Firewall: on/off per profile, allowed apps, advanced rules Lesson: Control Panel applets, part 1
WinRM: WinRM (Windows Remote Management): runs PowerShell commands remotely, no desktop needed Lesson: Methods and tools
Winver: winver: opens a window with the Windows version and build Lesson: Informational commands
Wired: Wired: plug in Ethernet; DHCP usually does the rest Lesson: Establish network connections
Wireless: Wireless: pick the SSID, enter the key or enterprise credentials Lesson: Establish network connections
Without media features: They ship without media features such as Windows Media Player and some media codecs. Lesson: N versions
Word processing: Word processing, spreadsheets and presentation tools with real-time co-editing and version history Lesson: Collaboration tools
Workgroup: In a workgroup, every PC keeps its own accounts; it's fine for a few PCs. Lesson: Domain joined vs. workgroup
Workstation OS: A workstation OS runs desktops and laptops. Lesson: Workstation OSs
WPA2: WPA2: AES encryption; Personal mode is open to offline password guessing Lesson: Protocols and encryption
WPA3: WPA3: SAE replaces the PSK handshake and resists offline guessing; Enterprise adds a 192-bit mode Lesson: Protocols and encryption
WWAN/cellular: WWAN/cellular: a built-in cellular modem or SIM/eSIM, or tether to a phone hotspot Lesson: Establish network connections
X
XDR: XDR (extended detection and response): correlates endpoint, email, network and cloud data Lesson: Detection and response tools
XFS: XFS: high-performance journaling filesystem for large files; default on Red Hat-family Linux Lesson: Filesystems: Linux and macOS
Z
Zero Trust model: Zero Trust model: never trust by location; verify every user, device and request every time Lesson: Principles
Zero-day attack: Zero-day attack: exploits a flaw the vendor doesn't know about yet, so there's no patch Lesson: Password and app attacks
Zero-touch deployment: Zero-touch deployment: the PC ships straight to the user; on first sign-in it enrolls in management and installs apps and policies itself (e.g. Lesson: Deploying many PCs

Acronyms

Acronym	Stands for	What it means
AAA	Authentication, Authorization, and Accounting	The security trio: prove who you are, decide what you may do, and log what you did.
AAAA	IPv6 Address (DNS record)	DNS record that maps a host name to an IPv6 address.
AC	Alternating Current	The power from a wall outlet, which reverses direction many times a second. A PSU turns it into DC.
ACK	Acknowledgment	A TCP flag (and packet) that confirms data or a connection request was received.
ACL	Access Control List	An ordered list of allow and deny rules on a router, firewall or file, checked from the top down.
ADB	Android Debug Bridge	A developer tool that controls an Android device from a computer over USB or network. Leave it off on work phones.
ADSL	Asymmetric Digital Subscriber Line	DSL with faster download than upload, over phone lines.
AES	Advanced Encryption Standard	The standard symmetric cipher today: one shared key (128, 192 or 256 bits) encrypts and decrypts data in 128-bit blocks.
AHCI	Advanced Host Controller Interface	The standard mode for SATA drive controllers. Changing it from RAID or IDE after setup can stop Windows booting.
AI	Artificial Intelligence	Software that learns patterns from data to make predictions or generate text and images.
AIO	All-in-One	A single unit: an AIO liquid cooler (pump, tubes and radiator), or a PC built into its monitor.
APFS	Apple File System	Apple's file system for macOS and iOS, built for SSDs, with snapshots and built-in encryption.
APK	Android Package Kit	The install file for an Android app. APKs from outside the Play Store (sideloading) can carry malware.
APN	Access Point Name	The phone setting that tells it which carrier gateway to use for mobile data. Wrong APN, no cellular data.
ARP	Address Resolution Protocol	Finds the MAC address that goes with an IPv4 address on the local network. Fake replies enable ARP poisoning.
AUP	Acceptable Use Policy	The rules users agree to about what they may and may not do on company devices and networks.
BCD	Boot Configuration Data	The Windows database that tells the boot manager which OS to start and how; repaired with bootrec or bcdedit.
BEC	Business Email Compromise	A scam email that pretends to come from a boss or supplier to get a payment, gift cards or data.
BIOS	Basic Input/Output System	Older firmware that tests the hardware and starts the operating system. UEFI has replaced it on modern PCs.
BLE	Bluetooth Low Energy	A low-power Bluetooth mode for sensors, beacons and wearables.
BSOD	Blue Screen of Death	The Windows stop-error screen after a crash; its stop code points toward the cause (often a driver or hardware).
BYOD	Bring Your Own Device	Staff use their own phones and laptops for work, under company security rules.
CA	Certificate Authority	A trusted organization that checks identities and signs digital certificates.
CAC	Common Access Card	The US Department of Defense smart card ID, used to badge in and to log in to computers.
CAD	Computer-Aided Design	Software for technical drawings and 3D models; it needs a strong workstation and GPU.
CCFL	Cold Cathode Fluorescent Lamp	The old tube backlight in LCD screens. It needs an inverter; when it fails the image goes very dim.
CCMP	Counter Mode with CBC-MAC Protocol	The AES-based encryption and integrity protocol used by WPA2.
CCTV	Closed-circuit Television	Video cameras that record to a private system for watching and evidence.
CD	Compact Disc	An optical disc holding about 700 MB.
CEO	Chief Executive Officer	The top executive of a company.
CFO	Chief Financial Officer	The executive in charge of the company's money; a favorite name for attackers to fake in BEC emails.
CIDR	Classless Inter-domain Routing	Writes a network as an address plus a prefix length, like 192.168.1.0/24, instead of fixed classes.
CMDB	Configuration Management Database	A database of IT assets and how they connect, used to plan changes and solve incidents.
CMOS	Complementary Metal-Oxide Semiconductor	The small battery-backed memory that keeps firmware settings and the clock. A dead CMOS battery resets the time.
CRT	Cathode Ray Tube	The old, deep glass-tube monitor. It holds dangerous voltage even when unplugged.
CSM	Compatibility Support Module	A UEFI option that boots the old BIOS way (legacy boot). It turns off Secure Boot.
CVV	Card Verification Value	The 3- or 4-digit security code on a payment card. PCI DSS forbids storing it after the payment.
DC	Direct Current	Steady one-direction power, like a battery's; a PSU supplies 12 V, 5 V and 3.3 V DC.
DDoS	Distributed Denial of Service	Floods a target from many machines at once (often a botnet) so real users can't reach it.
DDR3	Double Data Rate 3	An older generation of PC memory (1.5 V). Doesn't fit DDR4 or DDR5 slots.
DDR4	Double Data Rate 4	The PC memory generation before DDR5: 288 pins, 1.2 V. Not interchangeable with DDR5.
DDR5	Double Data Rate 5	Current PC memory: faster than DDR4, 1.1 V, with power management on the module. Doesn't fit DDR4 slots.
DFS	Dynamic Frequency Selection	5 GHz Wi-Fi rule: access points listen for radar and move off a channel when they hear it.
DHCP	Dynamic Host Configuration Protocol	Hands devices an IP address, subnet mask, gateway and DNS server automatically (Discover, Offer, Request, Acknowledge).
DISM	Deployment Image Servicing and Management	A Windows command-line tool that repairs the system image (run it before SFC when SFC can't fix files).
DLL	Dynamic Link Library	A Windows file of shared code that programs load; attackers may plant or inject a malicious one.
DLP	Data Loss Prevention	Tools that find sensitive data and stop it leaving by email, upload, USB or print.
DMZ	Demilitarized Zone	A separate network zone for public-facing servers, between the internet and the internal network. Also called a screened subnet.
DNS	Domain Name System	The internet's phone book: it turns names like example.com into IP addresses.
DOCSIS	Data Over Cable Service Interface Specification	The standard that carries internet over cable TV coax to a cable modem.
DORA	Discover, Offer, Request, Acknowledge	The four DHCP steps a client and server go through to hand out an IP address.
DoS	Denial of Service	An attack that overloads or crashes a service so legitimate users can't use it.
DP	DisplayPort	A digital video connector for monitors; it can daisy-chain screens and runs over USB-C (Alt Mode).
DRAM	Dynamic Random-Access Memory	The main memory chips in a PC; they must be refreshed constantly and lose data without power.
DRM	Digital Rights Management	Technology that limits how digital content or software can be copied, shared or used.
DVD	Digital Versatile Disc	An optical disc holding 4.7 GB (single layer) or 8.5 GB (dual layer).
EDR	Endpoint Detection and Response	Software on each endpoint that records activity, spots threats and can isolate the device or kill processes.
EFI	Extensible Firmware Interface	Early name for UEFI. The EFI system partition holds the boot loaders on GPT disks.
EFS	Encrypting File System	A Windows feature (on NTFS) that encrypts individual files and folders for the user who owns them.
EMI	Electromagnetic Interference	Electrical noise from motors, lights or power cables that corrupts signals on nearby copper cable.
EOL	End of Life	The vendor stops making or selling a product; patches and support end soon after.
EPS	Entry-Level Power Supply (EPS12V)	The 4- or 8-pin 12 V power connector for the CPU, near the socket.
EPT	Extended Page Tables	Intel's hardware help for VM memory (a form of SLAT), which speeds up virtual machines.
ESD	Electrostatic Discharge	A static electricity spark that can kill parts. Use an anti-static wrist strap and mat.
EULA	End-User License Agreement	The license terms you accept to use software: how many devices, and what you may and may not do.
exFAT	Extensible File Allocation Table	A file system for USB sticks and memory cards: large files, readable on Windows and macOS.
EXPO	Extended Profiles for Overclocking	AMD's memory profile setting that runs RAM at its rated speed (like Intel XMP).
FAT	File Allocation Table	A simple, old file system still used on small flash media; very widely readable.
FAT32	File Allocation Table 32	An old, widely readable file system. No single file can be 4 GB or larger.
FCC	Federal Communications Commission	The US agency that regulates radio use, including Wi-Fi channels and power.
FRT	Facial Recognition Technology	Identifies or verifies a person from their face, used for unlocking phones and in some door systems.
GDPR	General Data Protection Regulation	The EU law that protects the personal data of people in the EU, with heavy fines for breaking it.
GFS	Grandfather-Father-Son	A backup rotation: daily backups (son), weekly (father) and monthly (grandfather) kept for set times.
GPL	GNU General Public License	An open-source license: you may use and change the code, but shared changes must stay open source.
GPO	Group Policy Object	A bundle of Windows settings pushed from Active Directory to users and computers.
GPT	GUID Partition Table	The modern disk partition style used with UEFI: disks over 2 TB and up to 128 partitions in Windows.
GPU	Graphics Processing Unit	The processor that draws graphics; also used for heavy parallel math like AI.
GUI	Graphical User Interface	Windows, icons and menus you click, instead of typed commands.
GUID	Globally Unique Identifier	A 128-bit ID meant to be unique worldwide, used for partitions, objects and devices.
HD	High Definition	Video at 720p or 1080p resolution.
HFS	Hierarchical File System	Apple's older Mac file system (HFS+), replaced by APFS.
HIPAA	Health Insurance Portability and Accountability Act	The US law that protects patients' health information (PHI).
HR	Human Resources	The department that hires people, onboards and offboards them, and keeps staff records.
HTTPS	Hypertext Transfer Protocol Secure	HTTP encrypted with TLS, port 443: the padlock in the browser.
IAM	Identity and Access Management	Managing who people are and what they can access: accounts, logins, roles and permissions.
ICMP	Internet Control Message Protocol	Carries network errors and tests, such as ping (echo) and the messages traceroute relies on.
ID	Identifier	A name or number that identifies something, like a user ID or badge ID.
IDC	Insulation Displacement Connector	The slots on a punch-down block or keystone jack that cut through wire insulation to make contact.
IEEE	Institute of Electrical and Electronics Engineers	The body that writes networking standards such as 802.3 (Ethernet) and 802.11 (Wi-Fi).
IIS	Internet Information Services	Microsoft's web server for Windows.
IMAPS	Internet Message Access Protocol Secure	IMAP email over TLS, port 993.
IMSI	International Mobile Subscriber Identity	The unique number on a SIM that identifies a subscriber to the cellular network.
IOMMU	Input-Output Memory Management Unit	CPU feature (Intel VT-d, AMD-Vi) that lets a VM safely use a physical device directly.
IP	Internet Protocol	The protocol that addresses and routes packets between networks.
IPv4	Internet Protocol version 4	The original internet address: 32 bits, written like 192.168.1.10.
IPv6	Internet Protocol version 6	The newer internet address: 128 bits, written in hex like 2001:db8::1.
IR	Infrared	Light just beyond what eyes can see; IR cameras do face sign-in, and IR is used by remote controls.
IRC	Internet Relay Chat	An old text chat system (often port 6667); some botnets still use it to take orders.
ISM	Industrial, Scientific and Medical	Radio bands open to unlicensed use, such as 2.4 GHz shared by Wi-Fi, Bluetooth and microwave ovens.
ISO	International Organization for Standardization (also a disc image file format)	The international standards body. A .iso file is also a full disc image used to install operating systems.
ISP	Internet Service Provider	The company that connects you to the internet.
IT	Information Technology	Computers, networks and the people who run them.
JIT	Just-in-Time	Admin rights granted only when needed and removed automatically afterwards.
KB	Knowledge Base	A library of help articles and fixes; Microsoft also numbers its updates as KB articles.
LGA	Land Grid Array	A CPU socket where the pins are in the socket on the motherboard, not on the CPU.
LPDDR	Low-Power Double Data Rate	Power-saving memory soldered onto phone and thin-laptop boards; it can't be upgraded.
LTE	Long-Term Evolution	The 4G cellular data standard.
MAC	Media Access Control	The 48-bit hardware address burned into a network interface, written like 00:1A:2B:3C:4D:5E.
MBR	Master Boot Record	The old partition style: up to 4 primary partitions and disks up to 2 TB; boot code sits in the first sector.
MDM	Mobile Device Management	Central control of phones and tablets: enforce passcodes, push apps and settings, and wipe lost devices.
MDR	Managed Detection and Response	A paid service whose analysts watch your systems 24/7 and respond to threats for you.
MFA	Multifactor Authentication	Logging in with two or more different kinds of proof: something you know, have or are.
MFD	Multifunction Device	One machine that prints, scans, copies and often faxes.
MIMO	Multiple Input, Multiple Output	Several antennas sending and receiving at once to carry more data.
MMC	Microsoft Management Console	The Windows console that holds admin tools (snap-ins) such as Device Manager and Disk Management.
MNDA	Mutual Non-Disclosure Agreement	An agreement where both sides promise to keep each other's confidential information secret.
MSDS	Material Safety Data Sheet	The safety sheet for a product (now called SDS): hazards, safe handling, disposal and first aid.
MSP	Managed Service Provider	An outside company that runs your IT for a monthly fee.
MST	Multi-Stream Transport	A DisplayPort feature for running several monitors from one port (daisy-chaining).
MTBF	Mean Time Between Failures	The average time a repairable device runs between failures.
NAS	Network-attached Storage	A box on the network that shares files over SMB or NFS.
NAT	Network Address Translation	Swaps private internal IP addresses for a public one as traffic leaves the network.
NDA	Non-Disclosure Agreement	A contract to keep confidential information secret.
NTFS	New Technology File System	The main Windows file system: permissions, encryption (EFS), compression and journaling.
NTP	Network Time Protocol	Keeps device clocks in sync over the network (UDP 123), which logs and Kerberos rely on.
NVR	Network Video Recorder	A box that records video from IP cameras.
OEM	Original Equipment Manufacturer	The company that made the device or part; the right place to get its drivers and firmware.
OS	Operating System	The core software that runs a computer, such as Windows, macOS, Linux, Android or iOS.
OSHA	Occupational Safety and Health Administration	The US agency that sets workplace safety rules.
OTP	One-Time Password/Passcode	A code that works for one login only, from an app, token or text message.
OU	Organizational Unit	A folder inside an Active Directory domain for users and computers; Group Policy can be linked to it.
OUI	Organizationally Unique Identifier	The first half (24 bits) of a MAC address, which identifies the manufacturer.
PAM	Privileged Access Management	Controls and records admin accounts: passwords in a vault, access only when needed, sessions logged.
PC	Personal Computer	A personal computer: a desktop or laptop.
PCL	Printer Command Language	HP's printer language, common for everyday office printing (PostScript is the other).
PDF	Portable Document Format	A file format that looks the same on every device; can hide malicious links or scripts.
PGA	Pin Grid Array	A CPU with the pins on the chip itself, which fit holes in the socket (older AMD).
PID	Process ID	The number the operating system gives each running program.
PII	Personally Identifiable Information	Information that identifies a person, such as name, address, Social Security number or birth date.
PIN	Personal Identification Number	A short secret number: something you know.
PIV	Personal Identity Verification	The US federal smart card ID used for building access and computer login.
PMIC	Power Management Integrated Circuit	A chip that manages power; DDR5 memory has its own on each module.
POP3	Post Office Protocol version 3	Downloads email to one device, usually removing it from the server. Port 110, or 995 with TLS.
POP3S	Post Office Protocol 3 Secure	POP3 email over TLS, port 995.
PPI	Pixels per Inch	How densely a screen packs its pixels; more PPI looks sharper.
PSK	Pre-shared Key	A shared password everyone types to join a network, as in WPA2-Personal.
PSU	Power Supply Unit	Turns wall AC power into the DC voltages a computer's parts need.
PTT	Platform Trust Technology	Intel's TPM built into the CPU firmware (AMD calls theirs fTPM); turn it on in UEFI for Windows 11.
PUP	Potentially Unwanted Program	Software you didn't really want, like adware or toolbars bundled into an installer.
PVC	Polyvinyl Chloride	Ordinary cable jacket plastic. It gives off toxic smoke in a fire, so use plenum cable in air spaces.
PWM	Pulse-Width Modulation	How 4-pin fan headers control fan speed, by switching power on and off very fast.
PXE	Preboot Execution Environment	Lets a PC boot from the network to install or load an OS from a server.
QEMU	Quick Emulator	An open-source emulator and virtualizer, often paired with KVM on Linux.
QoS	Quality of Service	Giving important traffic, such as voice and video, priority over other traffic.
QR	Quick Response	A square barcode phones can scan; a fake one can lead to a phishing site (quishing).
RADIUS	Remote Authentication Dial-In User Service	A central login (AAA) service used by Wi-Fi, VPN and switches. UDP 1812 and 1813; only the password is encrypted.
RD	Remote Desktop	Microsoft's remote desktop service; an RD Gateway lets users reach it safely through HTTPS.
RDP	Remote Desktop Protocol	Microsoft's remote desktop protocol, TCP port 3389. Don't expose it to the internet.
ReFS	Resilient File System	A Windows Server file system built to resist corruption on very large volumes.
RHEL	Red Hat Enterprise Linux	A widely used commercial Linux for servers; it uses dnf/yum packages and XFS by default.
RISC	Reduced Instruction Set Computer	A CPU design with a small set of simple instructions, like ARM; efficient on power.
RMM	Remote Monitoring and Management	Software IT teams and MSPs use to watch, patch and fix many computers remotely.
RPM	Revolutions per Minute	How fast a hard drive's platters or a fan spins, such as 7200 RPM.
RSR	Rapid Security Response	Apple's quick security patches for iPhone and Mac that install between full updates.
RTC	Real-Time Clock	The battery-backed clock chip that keeps time while the computer is off.
SAE	Simultaneous Authentication of Equals	The WPA3 password handshake (Dragonfly), which stops offline password guessing.
SAML	Security Assertion Markup Language	XML messages an identity provider sends to web apps saying who you are, for single sign-on.
SCP	Secure Copy Protocol	Copies files over SSH (port 22).
SD	Secure Digital	The common memory card format for cameras and devices (SDHC and SDXC are the larger versions).
SDHC	Secure Digital High Capacity	SD cards from over 2 GB up to 32 GB.
SDS	Safety Data Sheet	The safety sheet for a product: hazards, safe handling, disposal and first aid.
SDXC	Secure Digital Extended Capacity	SD cards from over 32 GB up to 2 TB.
SFC	System File Checker	The Windows command (sfc /scannow) that checks protected system files and repairs damaged ones.
SFP	Small Form-factor Pluggable	A small hot-swappable module that gives a switch port fiber or copper at up to 1 Gb.
SHA	Secure Hash Algorithm	A family of hash functions; SHA-256 is common today, SHA-1 is broken.
SID	Security Identifier	The unique number Windows gives each user, group and computer; permissions use it, not the name.
SLA	Service-Level Agreement	A contract's promised service level, such as 99.9% uptime or a 4-hour response.
SLAT	Second Level Address Translation	CPU help for virtual machine memory (Intel EPT, AMD RVI); needed by some hypervisors.
SMS	Short Message Service	Plain text messages over the cellular network. Weak as a second login factor.
SMT	Simultaneous Multithreading	Lets one CPU core run two threads at once (Intel calls it Hyper-Threading).
SNMP	Simple Network Management Protocol	Lets a monitoring system read and change device settings and receive alerts (traps). UDP 161 and 162.
SOHO	Small Office/Home Office	A small office or home office, usually with one all-in-one router.
SOP	Standard Operating Procedure	A written, step-by-step way to do a routine task the same way every time.
SPICE	Simple Protocol for Independent Computing Environments	A remote display protocol for viewing and using virtual machines.
SQL	Structured Query Language	The language for querying and changing data in relational databases.
SQLi	SQL Injection	Typing database commands into an app's input so the database runs them. Stopped by parameterized queries.
SSH	Secure Shell	An encrypted remote command line, TCP port 22. Replaces Telnet.
SSID	Service Set Identifier	The name of a Wi-Fi network.
SSN	Social Security Number	The US government ID number: highly sensitive PII.
SSO	Single Sign-On	Log in once and get into many apps without signing in again.
STP	Spanning Tree Protocol	Switches block redundant links so frames can't loop forever.
SVM	Secure Virtual Machine	AMD's CPU virtualization feature (AMD-V); turn it on in UEFI to run VMs.
SYN	Synchronize	The TCP flag that opens a connection: the first step of the three-way handshake.
TACACS+	Terminal Access Controller Access-Control System Plus	Cisco's central login (AAA) protocol over TCP 49: encrypts the whole message and controls each admin command.
TDP	Thermal Design Power	How much heat, in watts, a CPU or GPU is built to give off; used to size coolers and power supplies.
TKIP	Temporal Key Integrity Protocol	WPA's stopgap encryption, built on RC4. Deprecated and weak.
TLS	Transport Layer Security	Encrypts and authenticates connections, such as HTTPS. Use TLS 1.2 or 1.3.
TOTP	Time-based One-Time Password	A login code made from a shared secret and the current time, changing about every 30 seconds.
TPM	Trusted Platform Module	A security chip on the motherboard that stores keys and checks that the boot hasn't been tampered with.
TV	Television	A television; cable TV and modems use coax with F-type connectors.
TXT	Text record	DNS record that holds text; SPF, DKIM, DMARC and domain checks are published this way.
UAC	User Account Control	The Windows prompt that asks before a program gets admin rights.
UEFI	Unified Extensible Firmware Interface	Modern PC firmware that replaced BIOS: GPT boot disks, Secure Boot and a graphical setup screen.
UHD	Ultra High Definition	Video at 3840 x 2160 (4K) resolution.
UID	User ID	The number Linux uses for each user account; UID 0 is root.
UNC	Universal Naming Convention	The Windows path to a network share, written \\server\share.
UPnP	Universal Plug and Play	Lets devices open ports on a router by themselves. Handy, but risky: often turned off.
UPS	Uninterruptible Power Supply	A battery that keeps equipment running through short outages and allows a safe shutdown.
UTP	Unshielded Twisted Pair	Ordinary Ethernet cable: twisted copper pairs with no shield.
VAC	Volts of Alternating Current	AC voltage, such as 110-120 VAC in North America and 220-240 VAC in Europe.
VCSEL	Vertical-Cavity Surface-Emitting Laser	A cheap laser used in multimode fiber transceivers for short runs.
VDC	Volts of Direct Current	DC voltage, such as the 12, 5 and 3.3 VDC a PC power supply provides.
VM	Virtual Machine	A software computer running on a hypervisor, with its own OS, sharing the real hardware.
VNC	Virtual Network Computing	Cross-platform remote desktop sharing, usually on port 5900.
VPN	Virtual Private Network	An encrypted tunnel across an untrusted network, such as the internet.
VT	Virtualization Technology	Intel's CPU virtualization feature (VT-x); turn it on in UEFI to run VMs.
WAP	Wireless Access Point	A device that connects wireless clients to the wired network.
WEP	Wired Equivalent Privacy	The original Wi-Fi encryption, broken within minutes. Never use it.
WHEA	Windows Hardware Error Architecture	How Windows reports hardware errors; a WHEA stop error points to failing hardware or overclocking.
WinPE	Windows Preinstallation Environment	A small Windows that boots from USB or the network to install or repair Windows.
WinRE	Windows Recovery Environment	The Windows repair menu: Startup Repair, System Restore, Command Prompt and reset.
WinRM	Windows Remote Management	Windows' service for running commands on other machines (PowerShell remoting), ports 5985 and 5986.
WPA	Wi-Fi Protected Access	Wi-Fi Protected Access: the original version used TKIP and is outdated.
WPA2	Wi-Fi Protected Access 2	Wi-Fi security with AES (CCMP). Personal mode uses a shared password; Enterprise uses 802.1X logins.
WPA3	Wi-Fi Protected Access 3	The newest Wi-Fi security: SAE stops offline password guessing, with stronger encryption options.
WPS	Wi-Fi Protected Setup	Push-button or PIN Wi-Fi setup. The PIN can be brute-forced, so turn it off.
XDR	Extended Detection and Response	Detection and response that pulls together data from endpoints, network, cloud and email.
XFS	Extended File System (64-bit journaling file system; RHEL default)	A fast journaling file system for Linux; the default on Red Hat Enterprise Linux.
XML	Extensible Markup Language	A text format that marks up data with tags; used by SAML and SOAP.
XMP	Extreme Memory Profile	Intel's memory profile setting that runs RAM at its rated speed instead of a slow default.
XSS	Cross-Site Scripting	Injecting script into a website so it runs in other visitors' browsers.
ZIF	Zero Insertion Force	A connector with a flip-up latch so ribbon cables (or old CPUs) go in without pressure.

Practice it in Ranger's Help DeskThe same lessons as a story, with drills, hands-on labs and mock exams. Free, in your browser.

Play free

CompTIA, A+, Network+, Security+ and Linux+ are trademarks of CompTIA, Inc. Ranger Gamez is not affiliated with or endorsed by CompTIA. The practice questions are written to the published exam objectives; they are not real exam questions.