Chapter 13 Flashcards
A ______ attempts to thwart or stop unwanted or unauthorized activity from occurring.
preventive control
______ are the hardware or software mechanisms used to manage access and to provide protection for resources and systems.
Logical access controls (also known as technical access controls )
Controls can be implemented _______, ________ or ________.
administratively, logically/technically, or physically
A Type __ authentication factor is something you know.
Type 1
Type 2
1
A Type __ authentication factor is something you have.
Type 1
Type 2
2
A Type __ authentication factor is something you are or something you do. It is a physical characteristic of a person identified with different types of biometrics.
3
A Type _ error occurs when a valid subject is not authenticated. This is
also known as a false negative authentication.
1
A Type __ error occurs when an invalid subject is authenticated. This is
also known as a false positive authentication.
2
Devices with lower CERs are more
accurate than devices with higher CERs.
True or False ?
True
Kerberos uses ______symmetric encryption protocol.
Advanced Encryption Standard (AES)
All clients and servers are registered with the_______, and it maintains the secret keys for all network members.
Ticket
Kerberos Authentication Server
Key Distribution Center
Ticket-Granting Ticket
Key Distribution Center
The __________ verifies or rejects the authenticity and timeliness of tickets.
Ticket
Kerberos Authentication Server
Key Distribution Center
Ticket-Granting Ticket
Key Distribution Center
the functions of the Key Distribution Center (KDC) are :
a ticket-granting service (TGS), and an authentication service (AS).
A __________ provides proof that a subject has authenticated through a KDC and is authorized to request tickets to access other objects.
Ticket
Kerberos Authentication Server
Key Distribution Center
Ticket-Granting Ticket
ticket-granting ticket (TGT)
A ______ is an encrypted message that provides proof that a subject is authorized to access an object.
Ticket
Kerberos Authentication Server
Key Distribution Center
Ticket-Granting Ticket
ticket
_______ is an XML-based language that is commonly used to exchange authentication and authorization
(AA) information between federated organizations.
Security Assertion Markup Language (SAML)
Extensible Access Control Markup Language (XACML)
Directory Service Markup Language (DSML)
Service Provisioning Markup Language (SPML)
Security Assertion Markup Language (SAML)
_____________ is a newer framework based on XML but specifically designed for exchanging user information for federated identity single sign-on purposes.
Security Assertion Markup Language (SAML)
Extensible Access Control Markup Language (XACML)
Directory Service Markup Language (DSML)
Service Provisioning Markup Language (SPML)
Service Provisioning Markup Language (SPML)
_________ can display LDAP-based directory service information in an XML format.
Security Assertion Markup Language (SAML)
Extensible Access Control Markup Language (XACML)
Directory Service Markup Language (DSML)
Service Provisioning Markup Language (SPML)
Directory Service Markup Language (DSML)
_______________ is used to define access control policies within an XML format, and it commonly implements role-based access controls.
Security Assertion Markup Language (SAML)
Extensible Access Control Markup Language (XACML)
Directory Service Markup Language (DSML)
Service Provisioning Markup Language (SPML)
Extensible Access Control Markup Language (XACML)
_____________ is a ticket-based authentication system developed to address weaknesses in
Kerberos.
Secure European System for Applications in a Multivendor Environment (SESAME)
________ effectively provides SSO for the cloud and is especially useful when internal clients access cloud-based Software as a Service (SaaS) applications.
Identity and Access as a Service (IDaaS)
TACACS+ separates _____, ______ and _______ into separate processes
authentication, authorization, and accounting
Diameter supports ____ & _____ for encryption.
Internet Protocol Security (IPsec) and Transport Layer Security (TLS)
Name 3 AAA protocols
RADIUS, TACACS+, and Diameter.
