IS3230 CHAPTER 8

Question 1

In window-based systems, a value that specifies the rights that are allowed or denied in an access control entry (ACE) of an access control list (ACL) is called ___.

Answer 1

ACCESS MASK

Question 2

This stores information about objects on the network and makes this information available for authorized systems administrators and users. It gives network users access to permitted resources anywhere on the network using a single sign-on process. Also provides system admin with an intuitive hierarchical view of the network and a single point of administration for all network objects is called ___.

Answer 2

ACTIVE DIRECTORY

Question 3

A collection of binary data stored in a relational database is called ___.

Answer 3

BINARY LARGE OBJECTS (BLOBs)

Question 4

Objects that inherit certain characteristics, such as access controls, from a parent object is called ___.

Answer 4

CHILD OBJECTS

Question 5

The stored data may be in archival form on tape or optical disc, on a hard disk, or sitting in a system’s buffers is called ___.

Answer 5

DATA AT REST (DAR)

Question 6

Data as it travels from one place to another, such as over a network is called ___.

Answer 6

DATA IN MOTION (DIM)

Question 7

Rights that are given to a user by the owner of an object is called ___.

Answer 7

DELEGATED ACCESS RIGHTS

Question 8

A DAC system where rights are assigned by the owner of the resource in question is called ___.

Answer 8

DISCRETIONARY ACCESS CONTROL LIST (DACL)

Question 9

Access rights that are actively given to a user by an object owner is called ___.

Answer 9

EXPLICITLY DELEGATED RIGHTS

Question 10

The outermost boundary of an Active Directory service. This may contain several domains is called ___.

Answer 10

FOREST

Question 11

Rights that are inherited or otherwise passively assigned is called ___.

Answer 11

IMPLICITLY DELEGATED RIGHTS

Question 12

A combination of hardware and software used to analyze network traffic passing through a single point on the network. It is designed to analyze traffic patterns to find suspicious activity is called ___.

Answer 12

INTRUSION DETECTION

Question 13

An application layer protocol for querying and modifying directory services running under Transmission Control Protocol/Internet Protocol (TCP/IP)

Answer 13

LIGHTWEIGHT DIRECTORY ACCESS PROTOCOL (LDAP)

Question 14

A patch to the Linux kernel and a set of administrative tools that attempt to enhance security is called ___.

Answer 14

LINUX INTRUSION DETECTION SYSTEM (LIDS)

Question 15

A service that provides information to all systems on a network is called ___.

Answer 15

NETWORK INFORMATION SERVICE (NIS)

Question 16

A logical structure that allows you to organize users, computers, and other objects into separate units for administrative purposes is called ___.

Answer 16

ORGANIZATIONAL UNIT (OU)

Question 17

An object from which other objects inherit various properties including access controls is called ___.

Answer 17

PARENT OBJECT

Question 18

Software that monitors network ports to detect a port scan attack. These attacks are usually the precursor to a more serious attack is called ___.

Answer 18

PORT SCAN DETECTOR

Question 19

A mechanism used to control the output of a specific process is called ___.

Answer 19

PROCESS CONTROL SYSTEM (PCS)

Question 20

A database that stores data in tables and provides for relationships between various data is called ___.

Answer 20

RELATIONAL DATABASE (RDB)

Question 21

The superuser in Linux and UNIX systems is called ___.

Answer 21

ROOT

Question 22

A security mechanism for isolating programs running in a shared environment is called ___.

Answer 22

SANDBOX

Question 23

A user with full rights on a system is called ___.

Answer 23

SUPER ADMINISTRATOR

Question 24

A command that allows an administrator to run processes as root without actually logging in under the root account in a Linux or UNIX system is called ___.

Answer 24

SUPER USER DO (SUDO)

Question 25

A system-created access control list that handles the information assurance aspect of access controls is called ___.

Answer 25

SYSTEM ACCESS CONTROL LIST (SACL)

Question 26

A multi-processing, multi-user family of operating systems originally developed by Bell Laboratories and most often used for servers is called ___.

Answer 26

UNIX

Question 27

1. Data residing in a system’s buffers is considered data at rest.
   TRUE OR FALSE

Answer 27

TRUE

Question 28

2. Data in motion is at higher risk than data at rest.

TRUE OR FALSE

Answer 28

FALSE

Question 29

3. A(n) ___ is a list or collection of access control entities.

Answer 29

ACL

Question 30

4. The three primary ACEs are access-denied, access-allowed, and ___.

Answer 30

System-audit

Question 31

5. ___ in a database are an example of an application with internal access controls.

Answer 31

Binary large objects, or BLOBs

Question 32

6. Which operating system(s) implements the most granular access controls?
7. Linux
8. UNIX
9. Windows
10. 1 and 2

Answer 32

Windows

Question 33

7. In a Windows environment, what is an organizational unit?
8. A logical structure for organizing users, groups, and computers
9. A business unit
10. A group of related data
11. A logical structure for organizing firewall rules

Answer 33

A logical structure for organizing users, groups, and computers

Question 34

8. A Window domain administrator has full control over all the computers in the domain.
   TRUE OR FALSE

Answer 34

TRUE

Question 35

9. A Windows domain administrator is the top-level authority in a Windows environment.
   TRUE OR FALSE

Answer 35

FALSE

Question 36

10. In which operating systems is rwxr-xr-x an example of rights notation?

Answer 36

UNIX and Linux

Question 37

11. What does the sudo command in UNIX allow systems administrators to do?
12. Log in as root
13. Run any process as if they were logged in as another user
14. Disable the root user
15. Disable a user account

Answer 37

Run any process as if they were logged in as another user

Question 38

12. The four rights on an NIS+ object are Read, Modify, Create, and ___.

Answer 38

Destroy

Question 39

13. Why should an organization automate user creation? (Select two)
14. To save time and effort for the IT staff
15. To allow individuals to manage their own user accounts
16. To accurately add, modify, or remove access rights
17. To minimize the need for a full IT staff

Answer 39

To save time and effort for the IT staff

To accurately add, modify, or remove access rights