Home › Study Guides › Security+ SY0-801 Acronyms

Security+ SY0-801 Acronyms: The Official V8 List and What Changed

SY0-801 has 106 acronyms, down from 336 on the SY0-701 list. 254 acronyms were dropped and 32 are new (BIMI, LLM, SSE, gMSA, CSPM and more). Below: every V8 acronym with what it actually does, drills for the ones the exam loves to mix up, a quiz that brings back the ones you miss, and the full list of what you can stop memorizing.

106acronyms on SY0-801

32new in V8

74kept from SY0-701

254dropped since SY0-701

Source: CompTIA Security+ SY0-801 exam objectives v2.0, compared with SY0-701 objectives v7.0. Explanations and drills by FlashGenius. Last reviewed October 13, 2026. SY0-801 launches on or around November 17, 2026.

All 106 SY0-801 acronyms

Search or filter, then read the second line: the exam asks what a control does far more often than what the letters stand for.

Search acronyms

Acronym	Stands for · what it does	Objectives
AAA	Authentication, Authorization, and Accounting Framework covering proving who a user is, deciding what they may do, and logging what they did (1.1).	1.1
AI	Artificial Intelligence Machines that learn from data or generate content; SY0-801 adds its threats (2.6) and its use in security automation (4.6).	2.6, 4.6
ALE	Annualized Loss Expectancy Money a risk is expected to cost over a full year: SLE × ARO (5.2).	5.2
AML/CTFNew in V8	Anti-money Laundering/Counter-terrorism Financing Compliance training topic (5.4): spotting and reporting attempts to disguise criminal proceeds or fund terrorist groups.	5.4
APT	Advanced Persistent Threat Well-resourced attacker, often state-sponsored, that stays hidden in a network for a long time.	2.3
ARO	Annualized Rate of Occurrence How many times per year a risk is expected to occur (once every 10 years = 0.1).	5.2
AUP	Acceptable Use Policy Policy users sign that defines what they may and may not do with company systems (5.1).	5.1
BECNew in V8	Business Email Compromise Fraud where an attacker uses a hijacked or spoofed corporate mailbox (fake CEO or supplier) to redirect payments.	5.6
BIMINew in V8	Brand Indicators for Message Identification DNS record that shows a verified brand logo in the inbox; requires DMARC enforcement first.	4.1
BIOS	Basic Input/Output System Legacy firmware that starts a computer before the OS loads.	Acronym list
BYOD	Bring Your Own Device Policy letting staff use personal devices for work, usually managed with MDM.	5.1, 5.6
CABNew in V8	Change Advisory Board Group that reviews, approves or rejects proposed changes before they are made (1.2).	1.2
CAPTCHA	Completely Automated Public Turing test to tell Computers and Humans Apart Challenge meant to tell humans from bots; fake challenge pages are now an image-based threat vector (2.3).	2.3
CI/CDNew in V8	Continuous Integration and Continuous Deployment Pipeline that automatically builds, tests and deploys code; a SecOps automation target (4.6).	4.6
CIA	Confidentiality, Integrity, and Availability The three core security goals: keep data secret, keep it accurate and unaltered, and keep it reachable when needed (1.1).	1.1
CRL	Certificate Revocation List CA-signed file of serial numbers that are no longer trusted, published periodically and downloaded by clients.	1.3
CSPMNew in V8	Cloud Security Posture Management Tool that continuously scans cloud accounts for misconfigurations (4.3).	4.3
CSR	Certificate Signing Request File an applicant generates with its public key and identity details and sends to a CA to have a certificate issued (1.3).	1.3
CVE	Common Vulnerabilities and Exposures Public ID assigned to one specific, publicly disclosed vulnerability (year-number format, e.g. 2026-12345).	2.1
CVSS	Common Vulnerability Scoring System 0–10 score rating a vulnerability's technical severity.	2.1
CWENew in V8	Common Weakness Enumeration Catalog of weakness types (e.g. improper input validation) behind vulnerabilities.	Acronym list
DDoS	Distributed Denial of Service Attack that floods a target from many systems at once, such as a botnet, to knock it offline (2.5).	2.5
DHCP	Dynamic Host Configuration Protocol Service that automatically assigns IP addresses to devices.	Acronym list
DKIM	DomainKeys Identified Mail Cryptographic signature on email proving the message wasn't altered and came from the signing domain.	4.1
DLP	Data Loss Prevention Controls that detect and block sensitive data leaving the organization.	4.1, 4.4
DMARC	Domain-based Message Authentication, Reporting, and Conformance DNS policy telling receivers what to do with mail that fails SPF/DKIM alignment (none, quarantine, reject).	4.1
DNS	Domain Name System Translates names like example.com into IP addresses; target of cache poisoning.	2.5
DoS	Denial of Service Attack that makes a service unavailable by exhausting its resources.	2.5
EDR	Endpoint Detection and Response Agent on laptops and servers that records process activity, flags threats and can isolate or remediate that one host.	4.1
EOINew in V8	Expression of Interest Vendors signal they want to be considered for an upcoming project, typically before any detailed request or proposal.	5.3
GBICNew in V8	Gigabit Interface Converter Older hot-swappable transceiver module for switch ports (hardware list).	Acronym list
gMSANew in V8	Group Managed Service Account Active Directory account for services whose password AD rotates automatically and shares with a set of authorized servers (3.2).	3.2
HIDS	Host-based Intrusion Detection System Agent on a single server or workstation that watches its files, logs and processes and alerts on suspicious changes, without blocking.	4.1
HIPS	Host-based Intrusion Prevention System Agent on a single system that actively blocks malicious activity there, such as unauthorized changes to system files.	4.1
HRNew in V8	Human Resources Department that is a stakeholder in investigations, onboarding and offboarding (4.8).	4.8
IaC	Infrastructure as Code Defining servers, networks and cloud resources in version-controlled templates so they deploy consistently and can be reviewed (3.1).	3.1
IDS	Intrusion Detection System Detects and alerts on suspicious traffic or activity but does not block it.	4.1
IP	Internet Protocol Addressing and routing for network traffic; addresses are common indicators of compromise.	2.5, 4.3, 4.8
IPFIXNew in V8	Internet Protocol Flow Information Export Standard for exporting flow records (who talked to whom, how much); the open successor to NetFlow.	4.8
IPS	Intrusion Prevention System Sits inline and blocks malicious traffic, not just alerts.	4.1
IPSec	Internet Protocol Security Network-layer protocol suite (AH/ESP) that encrypts and authenticates packets; common in site-to-site and remote-access tunnels.	Acronym list
LAN	Local Area Network Network covering a single building or site, such as the office switches and Wi-Fi.	Acronym list
LDAP	Lightweight Directory Access Protocol Protocol for querying and updating directory services such as Active Directory.	4.5
LLMNew in V8	Large Language Model AI model that generates text; an attack surface for prompt injection and data loss (2.4, 2.6).	2.4
LMSNew in V8	Learning Management System Platform used to deliver and track security awareness training (5.6).	5.6
MDM	Mobile Device Management Central console that enforces policies, pushes apps and can remotely wipe phones and tablets (4.1).	4.1
MFA	Multifactor Authentication Requiring two or more factor types (know, have, are) to sign in.	2.5, 4.5
MOA	Memorandum of Agreement Formal document setting out specific, agreed responsibilities between parties.	5.3
MOU	Memorandum of Understanding Statement of intent to cooperate; less formal and less specific than an agreement.	5.3
MSA	Master Service Agreement Umbrella contract terms that cover all future work with a vendor.	5.3
MTBF	Mean Time Between Failures Average uptime a repairable component delivers before it breaks down; higher means more reliable (3.4).	3.4
MTTR	Mean Time to Repair Average time it takes to fix a broken component and return it to service (3.4).	3.4
NDA	Non-disclosure Agreement Contract that keeps shared information confidential.	5.3
NFC	Near-field Communication Very short-range wireless used for tap-to-pay and badges; a signal-based vector (2.3).	2.3
NICNew in V8	Network Interface Card Hardware that connects a device to a network.	Acronym list
NIDS	Network-based Intrusion Detection System Passive sensor (e.g. on a SPAN port or tap) that watches traffic on a network segment and alerts, without blocking.	4.1
NIPS	Network-based Intrusion Prevention System Inline sensor in the network path that inspects traffic and drops malicious packets automatically.	4.1
NVDNew in V8	National Vulnerability Database US government database that adds CVSS scores and details to CVEs.	Acronym list
OAuth	Open Authorization Delegation framework: lets an app access your resources on your behalf using tokens, never seeing your password (4.5).	4.5
OCSP	Online Certificate Status Protocol Real-time query to a CA about one certificate's revocation status.	1.3
OS	Operating System Core system software such as Windows or Linux; its vulnerabilities are covered in 2.4.	2.4, 4.1
OT	Operational Technology Systems that control physical processes, such as industrial control and building systems.	2.3, 3.1
OTPNew in V8	One-time Password A code valid for a single sign-in, generated by a token or authenticator app.	4.5
PDFNew in V8	Portable Document Formats Common fixed-layout file type for invoices, forms and e-books; malicious ones are an attachment-based vector (2.3).	2.3
PIRNew in V8	Post-incident Reporting Write-up after an incident is closed that documents the timeline, root cause and lessons learned (4.7).	4.7
PKI	Public Key Infrastructure The CAs, certificates, key pairs and policies that bind keys to identities (1.3).	1.3
QRNew in V8	Quick Response Scannable 2D barcode; malicious ones enable quishing (2.3, 2.5).	2.3
RCSNew in V8	Rich Communication Services Modern texting standard with rich media; a message-based threat vector (2.3).	2.3
RFNew in V8	Radio Frequency Radio signals; signal-based attacks include jamming and interception (2.3).	2.3
RFCNew in V8	Request for Comments Published internet standards documents, such as the ones defining TLS (5.1).	5.1
RFINew in V8	Request for Information Asks vendors to describe their capabilities and approach, as research before any requirements or purchase commitment.	5.3
RFPNew in V8	Request for Proposal Asks vendors for a detailed solution design and price for defined requirements.	5.3
RFQNew in V8	Request for Quote Asks for pricing on a clearly specified product or service.	5.3
ROI	Return on Investment Benefit of a control compared with what it costs.	5.3
RPO	Recovery Point Objective Maximum acceptable data loss, measured back in time from a failure.	3.4
RPSNew in V8	Redundant Power Supply Extra power unit, internal or attached, that takes over if the device's primary one fails (3.4).	3.4
RTFNew in V8	Rich Text Format Cross-platform word-processor document type that can carry embedded exploits as an attachment vector (2.3).	2.3
RTO	Recovery Time Objective Maximum acceptable time to restore a service after an outage.	3.4
SaaS	Software as a Service Complete application delivered and run by a provider; these providers are a supply-chain vector.	2.3
SAML	Security Assertions Markup Language XML-based standard for exchanging authentication assertions for web single sign-on.	4.5
SCAP	Security Content Automation Protocol Standards for automating configuration and vulnerability checks against benchmarks.	4.4
SELinux	Security-enhanced Linux Kernel security module that enforces mandatory access control, confining processes by labels (4.1).	4.1
SFPNew in V8	Small Form-factor Pluggable Small hot-swappable transceiver for switch fiber/copper ports (hardware list).	Acronym list
SIEM	Security Information and Event Management Collects and correlates logs from many sources to alert on suspicious activity (4.4).	4.4
SLE	Single Loss Expectancy Cost of one occurrence of a risk: asset value × exposure factor.	5.2
SMS	Short Message Service Text messaging; used for smishing and weak OTP delivery.	2.3
SNMP	Simple Network Management Protocol Protocol for polling and configuring routers and switches and receiving their traps; use v3 for encryption and authentication (4.4).	4.4
SOAR	Security Orchestration, Automation, and Response Runs playbooks that chain security tools together so routine incident actions (disable account, open ticket) happen without an analyst.	Acronym list
SOC	Security Operations Center The team that monitors alerts and responds to security events.	Acronym list
SOPNew in V8	Standard Operating Procedure Step-by-step instructions for performing a routine task the same way every time.	1.2, 5.1
SOW	Statement of Work Defines the tasks, deliverables and timeline for one specific engagement.	5.3
SPF	Sender Policy Framework DNS record listing which servers may send mail for a domain (checks the envelope sender).	4.1
SQL	Structured Query Language Standard language for reading and changing relational database data; unsanitized input into it enables injection attacks (2.5).	Acronym list
SSENew in V8	Security Service Edge Cloud-delivered security for access (ZTNA, secure web gateway, CASB) (3.2); takes SASE's place on the V8 list.	3.2
SSO	Single Sign-on Authenticate one time and reach many applications without re-entering credentials (4.5).	4.5
TLS	Transport Layer Security Protocol that encrypts data in transit, e.g. HTTPS.	Acronym list
TOC	Time-of-check The moment a condition is verified in a race condition, before the resource is used.	2.4
TOU	Time-of-use The moment the checked resource is actually used; attackers swap it in between.	2.4
UPS	Uninterruptible Power Supply Battery backup that keeps equipment running through short outages.	3.4
USB	Universal Serial Bus Common port and device standard; malicious drives and cables are an external media vector.	2.3
UTM	Unified Threat Management Single appliance combining firewall, IPS, content filtering and more.	4.1
VNCNew in V8	Virtual Network Computing Cross-platform remote desktop system (RFB protocol); an exposed one is a remote-access vector (2.3).	2.3
VPN	Virtual Private Network Encrypted tunnel for remote access or site-to-site connectivity.	2.3, 3.2
WAF	Web Application Firewall Filter in front of a website or API that inspects HTTP (Layer 7) requests and blocks attacks like injection and XSS (4.1).	4.1
WIPS	Wireless Intrusion Prevention System Monitors the radio airspace to detect and contain rogue access points and Wi-Fi attacks (4.1).	4.1
XDR	Extended Detection and Response Platform that correlates telemetry and runs native response actions across endpoints, network, cloud and email, beyond a single host.	4.1

Don't mix these up: 12 groups the exam uses as trick options

Each group puts look-alike acronyms side by side with the one-line difference. Use "Drill this group" to test yourself on short scenarios.

SPF vs DKIM vs DMARC vs BIMI

SPF = who may send · DKIM = signature proves integrity · DMARC = policy and alignment for failures · BIMI = logo, needs DMARC enforcement.

SPF Sender Policy Framework: DNS record listing which servers may send mail for a domain (checks the envelope sender).
DKIM DomainKeys Identified Mail: Cryptographic signature on email proving the message wasn't altered and came from the signing domain.
DMARC Domain-based Message Authentication, Reporting, and Conformance: DNS policy telling receivers what to do with mail that fails SPF/DKIM alignment (none, quarantine, reject).
BIMI Brand Indicators for Message Identification: DNS record that shows a verified brand logo in the inbox; requires DMARC enforcement first.

RTO vs RPO vs MTTR vs MTBF

RTO = how long down is acceptable · RPO = how much data loss is acceptable · MTTR = how long repairs take on average · MTBF = how long it runs between failures.

RTO Recovery Time Objective: Maximum acceptable time to restore a service after an outage.
RPO Recovery Point Objective: Maximum acceptable data loss, measured back in time from a failure.
MTTR Mean Time to Repair: Average time it takes to fix a broken component and return it to service (3.4).
MTBF Mean Time Between Failures: Average uptime a repairable component delivers before it breaks down; higher means more reliable (3.4).

SLE vs ALE vs ARO

SLE = cost of one event (asset value × exposure factor) · ARO = events per year · ALE = SLE × ARO.

SLE Single Loss Expectancy: Cost of one occurrence of a risk: asset value × exposure factor.
ALE Annualized Loss Expectancy: Money a risk is expected to cost over a full year: SLE × ARO (5.2).
ARO Annualized Rate of Occurrence: How many times per year a risk is expected to occur (once every 10 years = 0.1).

NIDS vs NIPS vs HIDS vs HIPS vs WIPS

N = network, H = host, W = wireless · D = detect and alert · P = prevent (inline/blocking).

NIDS Network-based Intrusion Detection System: Passive sensor (e.g. on a SPAN port or tap) that watches traffic on a network segment and alerts, without blocking.
NIPS Network-based Intrusion Prevention System: Inline sensor in the network path that inspects traffic and drops malicious packets automatically.
HIDS Host-based Intrusion Detection System: Agent on a single server or workstation that watches its files, logs and processes and alerts on suspicious changes, without blocking.
HIPS Host-based Intrusion Prevention System: Agent on a single system that actively blocks malicious activity there, such as unauthorized changes to system files.
WIPS Wireless Intrusion Prevention System: Monitors the radio airspace to detect and contain rogue access points and Wi-Fi attacks (4.1).

SAML vs OAuth vs LDAP vs SSO

SAML = XML assertions for web SSO · OAuth = delegated authorization for apps/APIs · LDAP = directory queries · SSO = the user experience of signing in once.

SAML Security Assertions Markup Language: XML-based standard for exchanging authentication assertions for web single sign-on.
OAuth Open Authorization: Delegation framework: lets an app access your resources on your behalf using tokens, never seeing your password (4.5).
LDAP Lightweight Directory Access Protocol: Protocol for querying and updating directory services such as Active Directory.
SSO Single Sign-on: Authenticate one time and reach many applications without re-entering credentials (4.5).

EDR vs XDR vs SIEM vs SOAR

EDR = endpoint agent · XDR = detection across endpoint, network, cloud, email · SIEM = collect and correlate logs · SOAR = automate response playbooks.

EDR Endpoint Detection and Response: Agent on laptops and servers that records process activity, flags threats and can isolate or remediate that one host.
XDR Extended Detection and Response: Platform that correlates telemetry and runs native response actions across endpoints, network, cloud and email, beyond a single host.
SIEM Security Information and Event Management: Collects and correlates logs from many sources to alert on suspicious activity (4.4).
SOAR Security Orchestration, Automation, and Response: Runs playbooks that chain security tools together so routine incident actions (disable account, open ticket) happen without an analyst.

RFI vs RFP vs RFQ vs EOI

EOI = who is interested · RFI = what can you do · RFP = propose a solution and price · RFQ = price for a defined item.

RFI Request for Information: Asks vendors to describe their capabilities and approach, as research before any requirements or purchase commitment.
RFP Request for Proposal: Asks vendors for a detailed solution design and price for defined requirements.
RFQ Request for Quote: Asks for pricing on a clearly specified product or service.
EOI Expression of Interest: Vendors signal they want to be considered for an upcoming project, typically before any detailed request or proposal.

MOU vs MOA vs MSA vs SOW vs NDA

MOU = intent · MOA = specific agreed responsibilities · MSA = umbrella terms · SOW = this project's tasks and deliverables · NDA = confidentiality.

MOU Memorandum of Understanding: Statement of intent to cooperate; less formal and less specific than an agreement.
MOA Memorandum of Agreement: Formal document setting out specific, agreed responsibilities between parties.
MSA Master Service Agreement: Umbrella contract terms that cover all future work with a vendor.
SOW Statement of Work: Defines the tasks, deliverables and timeline for one specific engagement.
NDA Non-disclosure Agreement: Contract that keeps shared information confidential.

CRL vs OCSP vs CSR

CSR = request a certificate · CRL = download the revoked list · OCSP = ask about one certificate in real time.

CRL Certificate Revocation List: CA-signed file of serial numbers that are no longer trusted, published periodically and downloaded by clients.
OCSP Online Certificate Status Protocol: Real-time query to a CA about one certificate's revocation status.
CSR Certificate Signing Request: File an applicant generates with its public key and identity details and sends to a CA to have a certificate issued (1.3).

CVE vs CVSS vs CWE vs NVD

CVE = ID for one vulnerability · CVSS = its severity score · CWE = the weakness type · NVD = database that enriches CVEs.

CVE Common Vulnerabilities and Exposures: Public ID assigned to one specific, publicly disclosed vulnerability (year-number format, e.g. 2026-12345).
CVSS Common Vulnerability Scoring System: 0–10 score rating a vulnerability's technical severity.
CWE Common Weakness Enumeration: Catalog of weakness types (e.g. improper input validation) behind vulnerabilities.
NVD National Vulnerability Database: US government database that adds CVSS scores and details to CVEs.

UPS vs RPS

UPS = battery that rides through a utility power outage · RPS = redundant power unit that takes over if the device's power supply fails.

UPS Uninterruptible Power Supply: Battery backup that keeps equipment running through short outages.
RPS Redundant Power Supply: Extra power unit, internal or attached, that takes over if the device's primary one fails (3.4).

TOC vs TOU

TOC = when the condition is checked · TOU = when the resource is used. The attack swaps the resource in between.

TOC Time-of-check: The moment a condition is verified in a race condition, before the resource is used.
TOU Time-of-use: The moment the checked resource is actually used; attackers swap it in between.

Acronym quiz that remembers what you miss

Acronyms you get wrong come back more often; ones you know well come back less. Your progress stays in this browser, so you can pick up where you left off.

Mode Deck

Dropped since SY0-701: what you can stop memorizing

254 acronyms from the SY0-701 list are not on the SY0-801 list. CompTIA's list covers acronyms that appear on the exam, so these are unlikely to be tested by name. Two cautions below.

Caution 1: 44 concepts are still tested by name

The acronym is gone, but the concept is written out in the SY0-801 objectives. Know the full term.

2FA Two-factor Authentication → still in 4.5 (as MFA)
ACL Access Control List → still in 1.2, 4.1 (allow/deny lists, access controls)
ATT&CK Adversarial Tactics, Techniques, and Common Knowledge → still in 5.5 (MITRE ATT&CK)
AV Antivirus → still in 4.1, 4.4 (antivirus)
BCP Business Continuity Planning → still in 3.4, 5.1 (business continuity)
BIA Business Impact Analysis → still in 5.2 (business impact analysis)
CA Certificate Authority → still in 1.3 (certificate authorities)
CCTV Closed-circuit Television → still in 4.8 (surveillance footage)
COOP Continuity of Operation Planning → still in 3.4, 5.1 (business continuity)
CSRF Cross-site Request Forgery → still in 2.5 (forgery)
DAC Discretionary Access Control → still in 4.5 (discretionary access control)
DRP Disaster Recovery Plan → still in 3.4, 5.1 (disaster recovery)
FDE Full Disk Encryption → still in 1.3 (full-disk encryption)
FIM File Integrity Management → still in 4.8 (file/log integrity)
FTPS Secured File Transfer Protocol → still in 3.2 (secure file transfer)
GPO Group Policy Object → still in 4.1 (Group Policy)
HA High Availability → still in 3.4 (high availability)
HOTP HMAC-based One-time Password → still in 4.5 (as OTP)
IAM Identity and Access Management → still in 4.5 (identity and access management)
ICS Industrial Control Systems → still in 2.3, 3.1 (operational technology)
IM Instant Messaging → still in 2.3 (instant messaging)
IR Incident Response → still in 4.7, 5.1 (incident response)
IRP Incident Response Plan → still in 4.7, 5.1 (incident response policy)
IdP Identity Provider → still in 2.4 (identity providers)
IoC Indicators of Compromise → still in 2.5 (indicators of compromise)
IoT Internet of Things → still in 2.3 (IoT devices)
MFD Multifunction Device → still in 2.3 (printers, IoT-based)
MFP Multifunction Printer → still in 2.3 (printers, IoT-based)
MSP Managed Service Provider → still in 2.3 (managed service providers)
MSSP Managed Security Service Provider → still in 2.3 (managed service providers)
NAC Network Access Control → still in 4.1 (network access control)
PCAP Packet Capture → still in 4.8 (packet captures)
PHI Personal Health Information → still in 3.3 (health data)
PII Personally Identifiable Information → still in 3.3 (personal information)
RBAC Role-based Access Control / Rule-based Access Control → still in 4.5 (rule-based and role-based access control)
RDP Remote Desktop Protocol → still in 2.3 (remote desktop)
SCADA Supervisory Control and Data Acquisition → still in 2.3, 3.1 (operational technology)
SFTP Secured File Transfer Protocol → still in 3.2 (secure file transfer)
SLA Service-level Agreement → still in 5.3 (service-level agreement)
SQLi SQL Injection → still in 2.5 (injection)
TOTP Time-based One-time Password → still in 4.5 (as OTP)
VM Virtual Machine → still in 2.4, 3.4 (virtualization)
XSRF Cross-site Request Forgery → still in 2.5 (forgery)
XSS Cross-site Scripting → still in 2.5 (injection)

Caution 2: crypto algorithms are now a category

AES, AES-256, 3DES, DES, RSA, ECC, DSA, ECDSA, SHA, MD5, HMAC, RC4, IDEA, DHE, ECDHE, PBKDF2, RIPEMD, GCM, CBC, ECB, CFB, XOR, IV, PFS are off the list. But objective 1.3 still lists symmetric and asymmetric encryption, algorithms, key length, key exchange and hashing algorithms. Know which family an algorithm belongs to and what it is used for, rather than memorizing every name.

Show the other 210 dropped acronyms

3DES Triple Data Encryption Standard
AES Advanced Encryption Standard
AES-256 Advanced Encryption Standards 256-bit
AH Authentication Header
AIS Automated Indicator Sharing
AP Access Point
API Application Programming Interface
ARP Address Resolution Protocol
ASLR Address Space Layout Randomization
BASH Bourne Again Shell
BGP Border Gateway Protocol
BPA Business Partners Agreement
BPDU Bridge Protocol Data Unit
CAR Corrective Action Report
CASB Cloud Access Security Broker
CBC Cipher Block Chaining
CCMP Counter Mode/CBC-MAC Protocol
CERT Computer Emergency Response Team
CFB Cipher Feedback
CHAP Challenge Handshake Authentication Protocol
CIO Chief Information Officer
CIRT Computer Incident Response Team
CMS Content Management System
COBO Corporate-owned, Business-only
COPE Corporate Owned, Personally Enabled
CP Contingency Planning
CRC Cyclical Redundancy Check
CSO Chief Security Officer
CSP Cloud Service Provider
CSU Channel Service Unit
CTM Counter Mode
CTO Chief Technology Officer
CYOD Choose Your Own Device
DBA Database Administrator
DEP Data Execution Prevention
DES Digital Encryption Standard
DHE Diffie-Hellman Ephemeral
DLL Dynamic Link Library
DNAT Destination Network Address Translation
DNSSEC Domain Name System Security Extensions
DPO Data Privacy Officer
DSA Digital Signature Algorithm
DSL Digital Subscriber Line
EAP Extensible Authentication Protocol
ECB Electronic Code Book
ECC Elliptic Curve Cryptography
ECDHE Elliptic Curve Diffie-Hellman Ephemeral
ECDSA Elliptic Curve Digital Signature Algorithm
EFS Encrypted File System
ERP Enterprise Resource Planning
ESN Electronic Serial Number
ESP Encapsulated Security Payload
EULA End User License Agreement
FACL File System Access Control List
FPGA Field Programmable Gate Array
FRR False Rejection Rate
FTP File Transfer Protocol
GCM Galois Counter Mode
GDPR General Data Protection Regulation
GPG Gnu Privacy Guard
GPS Global Positioning System
GPU Graphics Processing Unit
GRE Generic Routing Encapsulation
HDD Hard Disk Drive
HMAC Hashed Message Authentication Code
HSM Hardware Security Module
HTML Hypertext Markup Language
HTTP Hypertext Transfer Protocol
HTTPS Hypertext Transfer Protocol Secure
HVAC Heating, Ventilation Air Conditioning
ICMP Internet Control Message Protocol
IDEA International Data Encryption Algorithm
IDF Intermediate Distribution Frame
IEEE Institute of Electrical and Electronics Engineers
IKE Internet Key Exchange
IMAP Internet Message Access Protocol
IRC Internet Relay Chat
ISO International Standards Organization
ISP Internet Service Provider
ISSO Information Systems Security Officer
IV Initialization Vector
IaaS Infrastructure as a Service
KDC Key Distribution Center
KEK Key Encryption Key
L2TP Layer 2 Tunneling Protocol
LEAP Lightweight Extensible Authentication Protocol
MAC Mandatory Access Control / Media Access Control / Message Authentication Code
MAN Metropolitan Area Network
MBR Master Boot Record
MD5 Message Digest 5
MDF Main Distribution Frame
ML Machine Learning
MMS Multimedia Message Service
MPLS Multi-protocol Label Switching
MSCHAP Microsoft Challenge Handshake Authentication Protocol
MTTF Mean Time to Failure
MTU Maximum Transmission Unit
MX Mail Exchange
MaaS Monitoring as a Service
NAT Network Address Translation
NGFW Next-generation Firewall
NIST National Institute of Standards & Technology
NTFS New Technology File System
NTLM New Technology LAN Manager
NTP Network Time Protocol
OID Object Identifier
OSINT Open-source Intelligence
OSPF Open Shortest Path First
OTA Over the Air
OVAL Open Vulnerability Assessment Language
OWASP Open Worldwide Application Security Project
P12 PKCS #12
P2P Peer to Peer
PAC Proxy Auto Configuration
PAM Privileged Access Management / Pluggable Authentication Modules
PAP Password Authentication Protocol
PAT Port Address Translation
PBKDF2 Password-based Key Derivation Function 2
PBX Private Branch Exchange
PCI DSS Payment Card Industry Data Security Standard
PDU Power Distribution Unit
PEAP Protected Extensible Authentication Protocol
PED Personal Electronic Device
PEM Privacy Enhanced Mail
PFS Perfect Forward Secrecy
PGP Pretty Good Privacy
PIV Personal Identity Verification
PKCS Public Key Cryptography Standards
POP Post Office Protocol
POTS Plain Old Telephone Service
PPP Point-to-Point Protocol
PPTP Point-to-Point Tunneling Protocol
PSK Pre-shared Key
PTZ Pan-tilt-zoom
PUP Potentially Unwanted Program
PaaS Platform as a Service
RA Recovery Agent / Registration Authority
RACE Research and Development in Advanced Communications Technologies in Europe
RAD Rapid Application Development
RADIUS Remote Authentication Dial-in User Service
RAID Redundant Array of Inexpensive Disks
RAS Remote Access Server
RAT Remote Access Trojan
RC4 Rivest Cipher version 4
RFID Radio Frequency Identifier
RIPEMD RACE Integrity Primitives Evaluation Message Digest
RSA Rivest, Shamir, & Adleman
RTBH Remotely Triggered Black Hole
RTOS Real-time Operating System
RTP Real-time Transport Protocol
S/MIME Secure/Multipurpose Internet Mail Extensions
SAE Simultaneous Authentication of Equals
SAN Storage Area Network / Subject Alternative Name
SASE Secure Access Service Edge
SCEP Simple Certificate Enrollment Protocol
SD-WAN Software-defined Wide Area Network
SDK Software Development Kit
SDLC Software Development Lifecycle
SDLM Software Development Lifecycle Methodology
SDN Software-defined Networking
SED Self-encrypting Drives
SEH Structured Exception Handler
SHA Secure Hashing Algorithm
SHTTP Secure Hypertext Transfer Protocol
SIM Subscriber Identity Module
SMB Server Message Block
SMTP Simple Mail Transfer Protocol
SMTPS Simple Mail Transfer Protocol Secure
SOAP Simple Object Access Protocol
SPIM Spam over Internet Messaging
SRTP Secure Real-Time Protocol
SSD Solid State Drive
SSH Secure Shell
SSL Secure Sockets Layer
STIX Structured Threat Information eXchange
SWG Secure Web Gateway
TACACS+ Terminal Access Controller Access Control System
TAXII Trusted Automated eXchange of Indicator Information
TCP/IP Transmission Control Protocol/Internet Protocol
TGT Ticket Granting Ticket
TKIP Temporal Key Integrity Protocol
TPM Trusted Platform Module
TSIG Transaction Signature
TTP Tactics, Techniques, and Procedures
UAT User Acceptance Testing
UAV Unmanned Aerial Vehicle
UBA User Behavior Analytics
UDP User Datagram Protocol
UEFI Unified Extensible Firmware Interface
UEM Unified Endpoint Management
URI Uniform Resource Identifier
URL Universal Resource Locator
UTP Unshielded Twisted Pair
VBA Visual Basic
VDE Virtual Desktop Environment
VDI Virtual Desktop Infrastructure
VLAN Virtual Local Area Network
VLSM Variable Length Subnet Masking
VPC Virtual Private Cloud
VTC Video Teleconferencing
VoIP Voice over IP
WAP Wireless Access Point
WEP Wired Equivalent Privacy
WIDS Wireless Intrusion Detection System
WO Work Order
WPA Wi-Fi Protected Access
WPS Wi-Fi Protected Setup
WTLS Wireless TLS
XML Extensible Markup Language
XOR Exclusive Or

Security+ SY0-801 acronyms: FAQ

How many acronyms are on the Security+ SY0-801 exam?

The official SY0-801 objectives list 106 acronyms, down from 336 entries on the SY0-701 list. 254 acronyms were dropped and 32 are new.

Which acronyms are new in SY0-801?

New acronyms include BIMI, LLM, SSE, gMSA, CSPM, IPFIX, CI/CD, BEC, CWE, NVD, RCS and the vendor-selection terms RFI, RFP, RFQ and EOI. Filter the list to 'New in V8' to see all 32.

Can I stop studying acronyms that were dropped from the list?

Mostly, but not completely. CompTIA's list covers acronyms that appear on the exam, so a dropped acronym is unlikely to be tested by name. But 44 dropped acronyms are still covered as concepts written out in the SY0-801 objectives, such as business impact analysis, MITRE ATT&CK and network access control, and the crypto objective (1.3) still lists symmetric and asymmetric encryption, algorithms and hashing.

Where does this acronym list come from?

It is taken from the acronym list in CompTIA's official Security+ SY0-801 exam objectives (version 2.0) and compared with the SY0-701 objectives (version 7.0). The one-line explanations and drills are written by FlashGenius. Last reviewed October 13, 2026.

What is the best way to memorize Security+ acronyms?

Learn what each one does, not just its expansion, because the exam uses acronyms inside scenarios. Drill the groups that are easy to confuse, such as SPF/DKIM/DMARC and RTO/RPO, and use spaced repetition so the ones you miss come back more often.

Put the acronyms to work

Free SY0-801 practice test10 questions across all five V8 domains, with explanations. SY0-801 PBQsDrag-and-drop, configuration and log tasks, including SPF/DKIM/DMARC. Security+ V8 overviewExam facts, what's new, and which version to take.

Still taking SY0-701? Use the SY0-701 acronym game. FlashGenius is an independent study resource, not affiliated with CompTIA.