CompTIA Network+ N10-009 Acronym List

Network Plus acronyms for the N10-009 exam: 149 of them, each with a plain-English definition. Networking is acronym-dense, so skim the list here, then drill the protocols and standards in the interactive finder.

149 acronyms|17 topic groups

Drill these interactively

Network+ N10-009 exam objectives Study with free flashcards

Application Security (3)

APIApplication Programming Interface: Set of protocols and tools enabling software applications to communicate with each other.
HTMLHypertext Markup Language: Standard markup language for creating and structuring content on web pages.
URLUniform Resource Locator: Web address specifying the protocol, host, and path to locate a resource on the internet.

Cryptography (14)

AESAdvanced Encryption Standard: Symmetric block cipher using 128, 192, or 256-bit keys; the current standard for encrypting data at rest and in transit.
AHAuthentication Header: IPSec protocol providing data integrity and origin authentication but not encryption.
CCMPCounter Mode with Cipher Block Chaining Message Authentication Code Protocol: AES-based encryption protocol used in WPA2 to provide confidentiality, integrity, and authentication for wireless frames.
ESPEncapsulating Security Payload: IPSec protocol providing confidentiality, data integrity, and authentication for IP packets.
IKEInternet Key Exchange: Protocol used to negotiate and establish security associations and keys for IPSec VPN tunnels.
IPSecInternet Protocol Security: Suite of protocols that authenticates and encrypts IP packets, commonly used for VPN tunnels.
PSKPre-Shared Key: Shared secret distributed in advance between parties for authenticating a connection, commonly used in Wi-Fi and VPNs.
SSLSecure Sockets Layer: Deprecated cryptographic protocol for securing communications; superseded by TLS.
TKIPTemporal Key Integrity Protocol: Encryption protocol used in WPA that wraps WEP with per-packet key mixing; now deprecated in favor of CCMP.
TLSTransport Layer Security: Cryptographic protocol providing encrypted, authenticated communication channels; successor to SSL.
WEPWired Equivalent Privacy: Obsolete wireless encryption standard with severe cryptographic weaknesses; should never be used.
WPAWi-Fi Protected Access: Wireless security protocol using TKIP encryption, an interim improvement over WEP before WPA2.
WPA2Wi-Fi Protected Access 2: Wireless security standard using AES-CCMP encryption, mandatory for Wi-Fi certification since 2006.
WPA3Wi-Fi Protected Access 3: Latest wireless security standard with SAE handshake, 192-bit enterprise mode, and forward secrecy.

Data Protection (1)

RAIDRedundant Array of Independent Disks: Storage technology combining multiple drives for redundancy, performance, or both using levels like 0, 1, 5, 6, and 10.

Hardware (1)

NICNetwork Interface Card: Hardware component that connects a computer to a network using wired or wireless connectivity.

Identity and Access Management (8)

AAAAuthentication, Authorization, and Accounting: Security framework that controls who can access resources, what they can do, and tracks their activity.
CHAPChallenge Handshake Authentication Protocol: Authentication protocol using a three-way handshake with a shared secret, periodically re-verifying identity.
EAPExtensible Authentication Protocol: Framework providing multiple authentication methods for wireless and point-to-point connections.
LDAPLightweight Directory Access Protocol: Protocol for accessing and managing distributed directory services over TCP port 389.
PAPPassword Authentication Protocol: Simple authentication protocol transmitting credentials in cleartext; insecure and largely deprecated.
PEAPProtected Extensible Authentication Protocol: EAP variant that creates an encrypted TLS tunnel for secure authentication, commonly used in enterprise Wi-Fi.
RADIUSRemote Authentication Dial-In User Service: AAA protocol providing centralized authentication, authorization, and accounting for network access.
TACACS+Terminal Access Controller Access-Control System Plus: Cisco AAA protocol using TCP port 49, encrypting the full authentication session for network device administration.

IP Addressing (4)

APIPAAutomatic Private IP Addressing: Self-assigned IP address in the 169.254.x.x range when a DHCP server is unavailable.
CIDRClassless Inter-Domain Routing: IP addressing method using variable-length subnet masking to allocate addresses more efficiently than classful addressing.
EUIExtended Unique Identifier: 64-bit identifier used in IPv6 SLAAC to create the interface ID portion of an address from the MAC address.
VLSMVariable-Length Subnet Masking: Subnetting technique allowing different-sized subnets within the same network, optimizing IP address usage.

Network Infrastructure (25)

BPDUBridge Protocol Data Unit: STP frame exchanged between switches to detect and prevent loops in bridged networks.
DWDMDense Wavelength Division Multiplexing: Fiber-optic technology transmitting multiple data streams simultaneously over different wavelengths of light.
FHRPFirst Hop Redundancy Protocol: Group of protocols (HSRP, VRRP, GLBP) providing default gateway redundancy through virtual IP sharing.
HSRPHot Standby Router Protocol: Cisco proprietary FHRP providing router failover by allowing two or more routers to share a virtual IP.
IDFIntermediate Distribution Frame: Wiring rack in a telecommunications room that connects to the MDF and distributes cabling to a floor or area.
iSCSIInternet Small Computer Systems Interface: Protocol carrying SCSI commands over IP networks, enabling block-level storage access over standard Ethernet.
LACPLink Aggregation Control Protocol: IEEE 802.3ad protocol that bundles multiple physical links into a single logical link for increased bandwidth and redundancy.
LLDPLink Layer Discovery Protocol: Vendor-neutral Layer 2 protocol used by devices to advertise their identity and capabilities on a LAN.
LWAPPLightweight Access Point Protocol: Protocol used by lightweight APs to communicate with and be managed by a wireless LAN controller.
MDFMain Distribution Frame: Primary wiring point in a building where external cabling connects to the internal network backbone.
MSTPMultiple Spanning Tree Protocol: IEEE 802.1s extension of RSTP supporting multiple spanning tree instances mapped to different VLANs.
NASNetwork-Attached Storage: Dedicated file storage device providing centralized file-level access to networked clients.
PoEPower over Ethernet: Technology delivering electrical power along with data over standard Ethernet cables to devices like APs and cameras.
RJ-45Registered Jack 45: Eight-pin connector used for Ethernet network cables, the standard for copper network terminations.
RSTPRapid Spanning Tree Protocol: IEEE 802.1w evolution of STP providing faster convergence when network topology changes.
SANStorage Area Network: High-speed dedicated network providing block-level access to consolidated storage for servers.
SDNSoftware-Defined Networking: Architecture separating the control plane from the data plane, enabling centralized and programmable network management.
SFPSmall Form-factor Pluggable: Compact hot-swappable transceiver module for fiber-optic and copper networking, supporting 1 Gbps.
SFP+Small Form-factor Pluggable Plus: Enhanced SFP transceiver supporting up to 10 Gbps for high-speed network connections.
SPANSwitched Port Analyzer: Switch feature that mirrors traffic from one or more ports to a monitoring port for network analysis.
STPSpanning Tree Protocol: Layer 2 protocol preventing broadcast loops in bridged networks by blocking redundant paths.
TCAMTernary Content-Addressable Memory: Specialized switch memory enabling high-speed lookups for ACLs, QoS, and routing decisions.
UTPUnshielded Twisted Pair: Common copper network cabling with twisted wire pairs and no additional shielding, used in Cat5e/Cat6 Ethernet.
VRRPVirtual Router Redundancy Protocol: Protocol providing automatic router failover by allowing multiple routers to share a virtual IP address.
VXLANVirtual Extensible LAN: Network virtualization technology encapsulating Layer 2 frames in UDP packets for scalable overlay networks.

Network Security (8)

ACLAccess Control List: A set of rules that filters network traffic or defines permissions for accessing system resources.
DMZDemilitarized Zone: Network segment between the internal network and the internet, hosting public-facing services while protecting internal resources.
DNSSECDomain Name System Security Extensions: Suite of extensions that adds cryptographic authentication to DNS responses to prevent spoofing.
NACNetwork Access Control: Security solution that enforces policy compliance on devices before granting network access.
NGFWNext-Generation Firewall: Advanced firewall combining traditional filtering with application awareness, IPS, and threat intelligence.
UTMUnified Threat Management: All-in-one security appliance combining firewall, IDS/IPS, antivirus, content filtering, and VPN in a single device.
VLANVirtual Local Area Network: Logical network segmentation at Layer 2, isolating broadcast domains on a switch without separate physical networks.
VPNVirtual Private Network: Encrypted tunnel over a public network providing secure remote access or site-to-site connectivity.

Network Services (15)

AAAAIPv6 Address Record: DNS record type mapping a hostname to a 128-bit IPv6 address.
CNAMECanonical Name Record: DNS record creating an alias that maps one domain name to another canonical domain name.
MXMail Exchange: DNS record specifying the mail server responsible for accepting email for a domain.
NSName Server Record: DNS record delegating a DNS zone to an authoritative name server.
PTRPointer Record: DNS record used for reverse DNS lookups, mapping an IP address to a hostname.
PXEPreboot Execution Environment: Standard for booting a computer from the network using DHCP and TFTP before loading a local OS.
QoSQuality of Service: Network mechanism that prioritizes certain traffic types to ensure performance for latency-sensitive applications like VoIP.
SIPSession Initiation Protocol: Signaling protocol for initiating, maintaining, and terminating VoIP and multimedia sessions.
SNTPSimple Network Time Protocol: Simplified version of NTP for time synchronization in environments where high accuracy is not required.
SOAStart of Authority: DNS record type containing authoritative information about a DNS zone, including the primary nameserver and serial number.
SRVService Record: DNS record specifying the hostname and port for a specific service, enabling service discovery.
TXTText Record: DNS record holding arbitrary text, commonly used for SPF, DKIM, and domain verification.
UPnPUniversal Plug and Play: Protocol suite enabling devices to discover each other and establish network services automatically, posing security risks.
VoIPVoice over Internet Protocol: Technology for delivering voice and multimedia over IP networks instead of traditional phone lines.
WINSWindows Internet Name Service: Legacy Microsoft service resolving NetBIOS names to IP addresses, largely replaced by DNS.

Network Troubleshooting (2)

OTDROptical Time-Domain Reflectometer: Fiber-optic testing instrument that measures signal loss, cable breaks, and splice quality by analyzing reflected light.
TDRTime-Domain Reflectometer: Copper cable testing instrument that identifies faults, breaks, and cable length by measuring signal reflections.

Networking (39)

APAccess Point: Network device that allows wireless clients to connect to a wired network.
ARPAddress Resolution Protocol: Layer 2 protocol that maps an IP address to a MAC address on a local network segment.
BGPBorder Gateway Protocol: Path-vector exterior gateway protocol used to exchange routing information between autonomous systems on the internet.
DHCPDynamic Host Configuration Protocol: Protocol that automatically assigns IP addresses and network configuration to devices on a network.
DNSDomain Name System: Hierarchical naming system that translates human-readable domain names to IP addresses.
FTPFile Transfer Protocol: Protocol for transferring files over TCP using port 21 for control and port 20 for data, transmitting in cleartext.
FTPSFile Transfer Protocol Secure: FTP with added TLS/SSL encryption for secure file transfers.
GREGeneric Routing Encapsulation: Tunneling protocol that encapsulates various network layer protocols inside point-to-point connections.
HTTPHypertext Transfer Protocol: Application layer protocol for transmitting web content over TCP port 80, without encryption.
HTTPSHypertext Transfer Protocol Secure: HTTP encrypted with TLS over TCP port 443, providing confidentiality and integrity for web traffic.
ICMPInternet Control Message Protocol: Network protocol used for diagnostic and error-reporting purposes, including ping and traceroute.
IGMPInternet Group Management Protocol: Protocol used by hosts and routers to manage multicast group membership on IPv4 networks.
IMAPInternet Message Access Protocol: Email retrieval protocol on port 143 that syncs messages on the server, allowing multi-device access.
IPInternet Protocol: Layer 3 protocol responsible for addressing and routing packets between hosts across networks.
ISPInternet Service Provider: Organization providing internet access and related services to customers.
L2TPLayer 2 Tunneling Protocol: VPN tunneling protocol that encapsulates PPP frames; typically paired with IPSec for encryption.
MACMedia Access Control: Unique 48-bit hardware address assigned to a NIC, used for communication on a local network segment.
MPLSMultiprotocol Label Switching: High-performance routing technique that directs data using labels rather than complex routing lookups.
NATNetwork Address Translation: Technique that maps private IP addresses to a public IP address for internet communication.
NetBIOSNetwork Basic Input/Output System: Legacy API for communication between applications on a LAN, used for name resolution and session management.
NTPNetwork Time Protocol: Protocol synchronizing clocks across network devices using UDP port 123, critical for log correlation.
PATPort Address Translation: NAT variant that maps multiple private IP addresses to a single public IP using different port numbers.
POP3Post Office Protocol v3: Email retrieval protocol on port 110 that downloads messages and typically removes them from the server.
PPPoEPoint-to-Point Protocol over Ethernet: Protocol encapsulating PPP frames inside Ethernet frames, commonly used by DSL providers for authentication.
RDPRemote Desktop Protocol: Microsoft protocol on port 3389 providing graphical remote access to Windows systems.
SCPSecure Copy Protocol: File transfer protocol using SSH encryption to securely copy files between hosts.
SFTPSSH File Transfer Protocol: Secure file transfer protocol running over SSH, providing encryption and authentication on port 22.
SMBServer Message Block: Network file sharing protocol on port 445 used primarily in Windows environments for file, printer, and serial access.
SMTPSimple Mail Transfer Protocol: Protocol for sending email messages between servers on TCP port 25, with port 587 for submission.
SNMPSimple Network Management Protocol: Protocol for monitoring and managing network devices, using agents and a management station via UDP ports 161/162.
SRTPSecure Real-Time Transport Protocol: Protocol providing encryption and authentication for RTP streams, securing VoIP and video communications.
SSHSecure Shell: Encrypted protocol on port 22 providing secure remote command-line access and file transfer.
SSIDService Set Identifier: Human-readable name identifying a wireless network, broadcast by access points.
TCPTransmission Control Protocol: Connection-oriented Layer 4 protocol providing reliable, ordered delivery through three-way handshake and acknowledgments.
TFTPTrivial File Transfer Protocol: Simple UDP-based file transfer protocol on port 69 with no authentication, used for PXE boot and firmware updates.
TTLTime to Live: Value limiting the lifetime of data in a network; in IP it counts hops, in DNS it defines cache duration.
UDPUser Datagram Protocol: Connectionless Layer 4 protocol offering fast, low-overhead delivery without guaranteed ordering or reliability.
WAPWireless Access Point: Networking device that allows wireless devices to connect to a wired network using Wi-Fi.
WLANWireless Local Area Network: Local area network using wireless communication, typically based on IEEE 802.11 standards.

Networking Fundamentals (12)

CSMA/CACarrier Sense Multiple Access with Collision Avoidance: Media access method used in wireless networks where devices listen before transmitting and use RTS/CTS to avoid collisions.
CSMA/CDCarrier Sense Multiple Access with Collision Detection: Media access method used in wired Ethernet where devices detect and retransmit after collisions.
IEEEInstitute of Electrical and Electronics Engineers: Professional organization that develops networking and technology standards like 802.11 and 802.1X.
LANLocal Area Network: Network connecting devices in a limited geographic area such as a building or campus.
LLCLogical Link Control: Upper sublayer of the data link layer that provides flow control and multiplexing for protocols.
MANMetropolitan Area Network: Network spanning a city or large campus, larger than a LAN but smaller than a WAN.
MTUMaximum Transmission Unit: Largest packet size that can be sent over a network link without fragmentation, typically 1500 bytes on Ethernet.
OUIOrganizationally Unique Identifier: First 24 bits of a MAC address identifying the hardware manufacturer, assigned by IEEE.
PDUProtocol Data Unit: Unit of data specified by a protocol at each OSI layer (frame, packet, segment, data).
PPPPoint-to-Point Protocol: Data link protocol for direct communication between two nodes, providing authentication and compression.
RFCRequest for Comments: Publication series by IETF documenting internet standards, protocols, and best practices.
WANWide Area Network: Network spanning a large geographic area, connecting multiple LANs across cities or countries.

Routing (4)

EIGRPEnhanced Interior Gateway Routing Protocol: Cisco advanced distance-vector routing protocol that uses DUAL algorithm for fast convergence.
IS-ISIntermediate System to Intermediate System: Link-state routing protocol used in large service provider networks, operating at Layer 2.
OSPFOpen Shortest Path First: Link-state interior gateway routing protocol using Dijkstra algorithm for IP networks, standard in enterprises.
RIPRouting Information Protocol: Distance-vector routing protocol using hop count as a metric, limited to 15 hops maximum.

Security Architecture (6)

HAHigh Availability: System design approach ensuring a service remains operational with minimal downtime, often using redundancy and failover.
IaaSInfrastructure as a Service: Cloud model providing virtualized computing resources like VMs, storage, and networking on demand.
IoTInternet of Things: Network of physical devices with embedded sensors and connectivity that collect and exchange data.
PaaSPlatform as a Service: Cloud model providing a development platform with tools, middleware, and runtime managed by the provider.
SaaSSoftware as a Service: Cloud model delivering fully managed applications accessible via a web browser.
VMVirtual Machine: Software-emulated computer running its own OS on a hypervisor, isolated from the physical host.

Security Operations (3)

IDSIntrusion Detection System: Security system that monitors network or host activity for malicious behavior and generates alerts.
IPSIntrusion Prevention System: Inline security system that monitors, detects, and actively blocks malicious network activity.
SYSLOGSystem Logging Protocol: Standard protocol for forwarding log messages from network devices to a centralized logging server on UDP port 514.

Security Program Management (1)

SLAService Level Agreement: Contract defining measurable service targets like uptime, response time, and support levels between provider and client.

Threats and Vulnerabilities (3)

DDoSDistributed Denial of Service: Attack using multiple compromised systems to flood a target, overwhelming its capacity to serve legitimate requests.
DoSDenial of Service: Attack that disrupts a service by overwhelming it with traffic or exploiting a vulnerability to make it unavailable.
MITMMan-in-the-Middle: Attack where an adversary secretly intercepts and potentially alters communication between two parties.

Memorize acronyms by using them

Acronyms stick once you have had to use one to answer a question. Take a free practice test and see which ones you still mix up.

Start Free Practice Test