Domain 5

Question 1

AAA Protocols

Answer 1

Authentication, Authorization, and Accounting

Question 2

AAA Protocols
Network Access (Remote Access) Server

Answer 2

Is a client to a RADIUS server and the RADIUS server provides AAA services

Question 3

Network Access Servers
RADIUS

Answer 3

Uses UDP and encrypts the password only

Remote access

Question 4

Network Access Servers
TACACS+

Answer 4

Uses TCP and encrypts the entire session

Admin access to network devices

Question 5

Network Access Servers
Diameter

Answer 5

is based on RADIUS and improves on many of the vulns, but NOT compatible

4G

Question 6

Active Directory
Kerberos

Answer 6

Primary purpose: authentication
- Allows users to prove their ID
- Also provides some confidentiality and integrity
- Does NOT include logging therefore is does NOT provide accountabilitiy

Common Attacks
- Replay
- Pass-the-ticket (Kerberos) / Pass the hash (NTLM)
- golden ticket
- kerberoasting

Question 7

Authorization Mechanisms
Need To Know

Answer 7

Subject with cearance to access is only granted if they Actually need it

Question 8

Authorization Mechanisms
Least Privilege

Answer 8

Same as need to know, but includes rights to take action on a system

Question 9

Authorization Mechanisms
Separation of Duties

Answer 9

Sensitive functions are split into tasks performed by 2+ employees

Question 10

Modern Approach to Least Privilege
Just-In-Time (JIT)

Answer 10

Allows temporary elevation or privilege (usually time limited) as needed, revoking privilege at the end of allowed window

• Sometime implemented through ephemeral accounts or a broker and remove access strategy

Question 11

Security Controls
Types (7)

Answer 11

• Preventative
• Detective
• Corrective
• Deterrent
• Compensating
• Directive
• Recovery

Question 12

Security Controls
Categories (3)

Answer 12

• Logical / Technical
• Physical
• Administrative

Question 13

Security Controls - Categories
Logical / Technical

Answer 13

Hardware or software used to protect

Examples
- encryption
- smart cards
- IDS
- Access Control List
- protocols
- firewalls
- routers
- Clipping levels

Question 14

Security Controls - Categories
Physical

Answer 14

Protect facility and real world objects
- guards, fences, alarms

Question 15

Security Controls - Categories
Administrative

Answer 15

Policies and procedures to enforce overall access control
- Focused on personnel and business practices

Examples
- background checks
- security training

Question 16

Security Controls - Types
Preventative

Answer 16

Stop unwanted activity from occuring

Question 17

Security Controls - Types
Detective

Answer 17

Discover unwanted activity.

• Often are reactive

Question 18

Security Controls - Types
Corrective

Answer 18

Restore systems to normal after unwanted activity

Example:
- BCP
- IDS
- antivirus solutions

Question 19

Security Controls - Types
Compensating

Answer 19

Provide options to other existing controls to aid in the enforcement and support of a security policy.

Examples:
- A disaster recovery plan with an alternate office location in the event fire suppress fails and building is damaged

Question 20

Security Controls - Types
Directive

Answer 20

To direct, confine, or control the actions of subject to force or encourage compliance with security policies

Examples
- Awareness training
- Monitoring
- Security policy

Question 21

Security Controls - Types
Recovery

Answer 21

To repair and restore resources

• More advanced than corrective controls

Question 22

Security Controls - Types
Deterrent

Answer 22

Discourage the violation of security policy
- Extends prevention
-

Question 23

Other Attacks
TEMPEST

Answer 23

Electronic emanations that every monitor produces to be read from a distance (effective on CRT monitors)

• Shoulder surfing for monitor displays

Question 24

Other Attacks
White Noise

Answer 24

Broadcasting false traffic at all times to mask and hid the presence of real traffic