501 Chapter 2 Flashcards by Christian Ramos

____ proves identity with some type of credentials

Authentication

How well did you know this?

Not at all

Perfectly

AAA stands for

Authentication, Authorization, Accounting

How well did you know this?

Not at all

Perfectly

____ work together with AAA to provide CAMS

Identification

How well did you know this?

Not at all

Perfectly

CAMS stand for

Comprehensive Access Management System

How well did you know this?

Not at all

Perfectly

List five (5) authentication factors

Something you know, Something you are, Somewhere you are, Something you do, Something you have

How well did you know this?

Not at all

Perfectly

least secure of all authentication factors

Something you know

How well did you know this?

Not at all

Perfectly

credit card-sized embedded with microchip and certificate

smart card

How well did you know this?

Not at all

Perfectly

PKI stands for

Public Key Infrastructure

How well did you know this?

Not at all

Perfectly

____ holds a user’s private key

Embedded Certificate

How well did you know this?

Not at all

Perfectly

____ is a specialized type of smartcard used by the US Department of Defense

CAC

How well did you know this?

Not at all

Perfectly

CAC stands for

Common Access Card

How well did you know this?

Not at all

Perfectly

____ is a specialized type of smartcard used by the US Federal agencies

PIV

How well did you know this?

Not at all

Perfectly

PIV stands for

Personal Identification Verification

How well did you know this?

Not at all

Perfectly

sometimes called hardware tokens to differentiate them from logical or software tokens

fob

How well did you know this?

Not at all

Perfectly

includes LCD display that changes periodically every 60 secs

fob

How well did you know this?

Not at all

Perfectly

HMAC stands for

Hash-based Message Authentication Code

How well did you know this?

Not at all

Perfectly

____ is an open standard used for creating one-time passwords similar to those used in tokens and fobs

HOTP

How well did you know this?

Not at all

Perfectly

HOTP stands for

HMAC-based One-Time Password

How well did you know this?

Not at all

Perfectly

____ is similar to HOTP but it uses a timestamp instead of a counter

TOTP

How well did you know this?

Not at all

Perfectly

TOTP stands for

Time-based One-Time Password

How well did you know this?

Not at all

Perfectly

____ is a network authentication mechanism used within Windows Active Directory domains and some Unix environments known as realms

Kerberos

How well did you know this?

Not at all

Perfectly

three (3) factors for Kerberos to work

A method of issuing tickets, time synchronization, a database of subject or users

How well did you know this?

Not at all

Perfectly

KDC stands for

Key Distribution Center

How well did you know this?

Not at all

Perfectly

____ uses a complex process of issuing ticket-granting tickets (TGTs) and other tickets

KDC

How well did you know this?

Not at all

Perfectly

requires all systems to be synchronized and within 5 minutes of each other

time synchronization

a suite of protocols provides authentication, integrity, confidentiality @Windows system, uses a Message Digest hashing algorithm to challenge users and check their credentials

NTLM

list the three versions of NTLM

NTLM NTLMv2 NTLM2

NTLM stands for

New Technology LAN Manager

a simple MD4 hash of the user's password

NTLM

____ has been cracked and therefore NTLM is not recommended for use

MD4

challenge-response authentication protocol, | creates HMAC-MD5 hash composed of a combination of username, logon domain name, user password, current time and more

NTLMv2

NTLMv2 + mutual authentication, | the client authenticates with server as well as server authenticates with the client

NTLM2

____ is and extension of X.500 standard that Novell and early Microsoft exchange server used

LDAP

____ uses encryption to protect LDAP transmissions

LDAPS

LDAP stands for

Lightweight Directory Access Protocol

LDAPS stands for

Lightweight Directory Access Protocol Secure

when using LDAPS, client and server establishes a ____ session before transmission of data

TLS

TLS stands for

Transport Layer Security

____ refers to the ability of a user to log on or access multiple systems by providing credentials only once

SSO

SSO stands for

Single Sign-On

____ and ____ uses SSO capabilities

Kerberos and LDAP

____ creates an indirect trust relationship

Transitive Trust

____ is an XML (Extensible Markup Language) used to exchange authentication and authorization information between parties

SAML

SAML stands for

Security Assertion Markup Language

SAML as ____: users authenticate with one site are not required to authenticate to another

federated identity management system

SAML three roles reqd:

principal, IdP, SP

IdP stands for

Identity Provider

SP stands for

Service Provider

@SAML, ____ will authenticate a user so they can access other sites, thus Singe Sign-On is achieved

IdP

@SAML, ____ is an entity that provides service to the principal

what is the primary purpose of SSO

identification and authentication of users

____ is an open standard for authorization companies use to provide secure access to protected resources, instead of creating accounts for each web site, you can use the same account only to AUTHORIZE it to do a particular thing

OAuth

has "id_token" for signing in profiles

OpenID Connect

it specifies that users are only granted what they need in order to properly perform: a janitor does not need CEO privileges to perform his function

principle of least privilege

four account types:

end-user accounts, privileged accounts, guest accounts, service accounts

an account for regular users/standard user account

end-user account

an account that has additional privileges than an end-user account

privileged account

an account with limited access

guest account

a regular account used by an application

service account

specifies when users can log on to a computer. If a user connects the network outside the restricted time, the system denies access

time-of-day restrictions

restrict access based on the location of the user

location-based policies

a ____ is a collection of information that provides identity (like username) and proves the identity (like a password)

credential

an access control model that uses role to manage rights and permissions for users

Role-based Access Control Model

an access control model that uses rules like firewall and routers uses rules within the ACLs (Access Control Lists) is based on a set of approved instructions

Rule-based Access Control Model

ACL stands for

Access Control List

an access control model where files and folders are "owned" the owner, by his discretion, will establish access to these objects

DAC

DAC stands for

Discretionary Access Control

NTFS stands for

New Technology File System

SID stands for

Security Identifiers

DACL stands for

Discretionary Access Control List

____ is a list of ACE

DACL

ACE stands for

Access Control Entities

an access control model that uses labels: sensitivity labels or security labels to determine access

MAC

MAC stands for

Mandatory Access Control

____ is a matrix of labels

Lattice

MAC is used when access is based on

need to know

ABAC stands for

Attribute-Based Access Control

Many SDNs use this access control model

ABAC

SDN stands for

Software-Defined Network

can be any characteristics of a user

Attribute