SIEM (Security Information and Event Management)Technology - Collects, analyzes, and correlates security logs for threat detection, compliance, and incident response. , EDR - Provides continuous monitoring and response to advanced threats on endpoints. , IDS - Monitors network traffic to detect suspicious or malicious activity; alerts but does not block. , IPS - Monitors and actively blocks or mitigates malicious traffic in real-time. , UDM - Centralized management of multiple security/network devices. Sometimes overlaps with vendors’ terminology. , UTM - All-in-one security appliance combining firewall, IPS, VPN, AV, and content filtering. , MDM - Controls, monitors, and secures mobile devices in an enterprise environment. , MAM - Manages and secures applications (instead of entire devices) for BYOD scenarios. , SOAR - Automates incident response workflows, integrates tools, and improves SOC efficiency. , AV - Detects and removes malware using signature-based and heuristic scanning. , DLP - Monitors and prevents unauthorized sharing or leakage of sensitive data. , CASB - Enforces security, compliance, and governance for cloud apps (SaaS). , SWG - Filters and inspects outbound/inbound web traffic for malware and policy violations. , WAF - Protects web applications from attacks like SQL injection, XSS, and OWASP Top 10 threats. , VPN - Encrypts internet traffic for secure remote access and privacy. , NGFW - Advanced firewall with deep packet inspection, application awareness, and integrated IPS/URL filtering. ,

Security+ Tools & Platforms - Hard

Print
Embed

Leaderboard

Visual style

Options

Switch template

Continue editing: ?