Authentication

Question 1

Time-Based One-Time Password: TOTP

Answer 1

Time-Based One-Time Password:

A password is computed from a shared secret and current time

Question 2

Hash based one time password: HOTP

Answer 2

uses Hash-based Message Authentication Code (HMAC)

Parties intending to use HOTP must establish some parameters;

A cryptographic hash method H (default is SHA-1)
A secret key K, which is an arbitrary byte string and must remain private
A counter C, which counts the number of iterations
A HOTP value length d (6–10, default is 6, and 6–8 is recommended)
Both parties compute the HOTP value derived from the secret key K and the counter C. Then the authenticator checks its locally generated value against the value supplied by the authenticated.

Counter makes it different from TOTP

Question 3

Context-Aware Authentication

Answer 3

Process to check the user’s or system’s attributed or characteristics prior to allowing it to connect

Restrict authentication based on the time of day or location

Question 4

Federated Identity Management: FidM

Answer 4

an arrangement between multiple enterprises or domains that enables their users to use the same identification data (digital identity) to access all their networks

Question 5

Federated Identity Management - FidM: Cross-Certification

Answer 5

Utilizes a web of trust between organizations where each one certifies others in the federation

Question 6

Federated Identity Management - FidM: Trusted Third-Party

Answer 6

Organizations are able to place their trust in a single third-party (also called the bridge model)

Trusted third-party model is more efficient than a cross certification or web of trust mode

Question 7

Federated Identity Management - FidM: SAML- Security Assertion Markup Language

Answer 7

Security Assertion Markup Language:
Attestation model built upon XML used to share federated identity management information between systems

Open standard for authentication & authorization
Authenticate via third-party

Question 8

Federated Identity Management - FidM: OpenID

Answer 8

An open standard and decentralized protocol that is used to authenticate users in a federated identity management system

Used in conjunction with OAuth2

User logs into an Identity Provider (IdP) and uses their account at Relying Parties (RP)

OpenID is easier to implement than SAML
SAML is more efficient than OpenID

Question 9

802.1x

Answer 9

Standardized framework used for port-based authentication on wired and wireless networks

Helps prevent rogue devices

(Ex: RADIUS, TACACS+)

Question 10

Extensible Authentication Protocol: EAP

Answer 10

A framework of protocols that allows for numerous methods of authentication including passwords, digital certificates, and public key infrastructure

EAP-MD5 uses simple passwords for its challenge-authentication

EAP-TLS uses digital certificates for mutual authentication

EAP-TTLS uses a server-side digital certificate and a client-side password for mutual authentication

Question 11

Extensible Authentication Protocol:- EAP-FAST

Answer 11

Provides flexible authentication via secure tunneling (FAST) by using a protected access credential instead of a certificate for mutual authentication

Question 12

Protected EAP - PEAP & Lightweight EAP - LEAP

Answer 12

Protected EAP:
Supports mutual authentication by using server certificates and Microsoft’s Active Directory to authenticate a client’s password

Lightweight EAP:
Proprietary to Cisco-based networks (supposedly FAST is an upgrade from LEAP)

Question 13

Lightweight Directory Access Protocol - LDAP

Answer 13

Lightweight Directory Access Protocol:
A database used to centralize information about clients and objects on the network

Unencrypted: Port 389
Encrypted: Port 636

Active Directory is Microsoft’s version

Question 14

Kerberos

Answer 14

An authentication protocol used by Windows to provide for two-way (mutual) authentication using a system of tickets

Port 88

A domain controller can be a single point of failure for Kerberos

Question 15

Challenge-Handshake Authentication Protocol - CHAP

Answer 15

Challenge-Handshake Authentication Protocol:
Used to provide authentication by using the user’s password to encrypt a challenge string of random numbers

3-way handshake
After link, server sends challenge message
Client responds with password hash calculated from challenge & password
Server compares hash with stored hash
Occurs periodically

Question 16

VPN Concentrator

Answer 16

Specialized hardware device that allows for hundreds of simultaneous VPN connections for remote workers

Question 17

Split Tunneling

Answer 17

A remote worker’s machine diverts internal traffic over the VPN but external traffic over their own internet connection

Prevent split tunneling through proper configuration and network segmentation

Question 18

Dont learn RADIUS

Answer 18

Centralization administration system for dial-up, VPN, and wireless authentication that uses either ports 1812/1813 (UDP) or 1645/1646 (UDP)

Operates at layer 7

Question 19

TACACS+ Dont learn

Answer 19

Cisco’s proprietary version of RADIUS that provides separate authentication and authorization functions over port 49 (TCP)

Question 20

MitB

Answer 20

Man-in-the-Browser Attack:

Intercepts API calls between the browser process and its DLLs

Question 21

Password Spraying

Answer 21

Brute force attack in which multiple user accounts are tested with a dictionary of common passwords

Question 22

Credential Stuffing

Answer 22

Brute force attack in which stolen user account names and passwords are tested against multiple websites

Credential stuffing can be prevented by not reusing passwords across different websites

Question 23

Broken Authentication

Answer 23

A software vulnerability where the authentication mechanism allows an attacker to gain entry

Weak password credentials
Weak password reset methods
Credential exposure
Session hijacking

Question 24

OAuth

Answer 24

Authorization framework
Determines what resources a user can access
Created by Google/Twitter/others
Used with OpenID - handles the SSO authentication

Question 25

Password Authentication Protocol: PAP

Answer 25

Password Authentication Protocol:
Used to provide authentication but is not considered secure since it transmits the login credentials unencrypted (in the clear)