IS3340 CHAPTER 3 Flashcards
An individual entry in a CACL is called ___?
ACCESS CONTROL ENTRY (ACE)
The list of access permissions for an object is called ___?
ACCESS CONTROL LIST (ACL)
Shared database of domain users, groups, computers, resources, and other information, along with network functionality to centralize and standardize network management and interoperation is called ___?
ACTIVE DIRECTORY
This is an access control approach that systematically nests individual user accounts in groups that make securing objects more general. It is an acronym for Accounts, Global groups, Universal groups, domain Local groups, and Permissions and is usually called ___?
AGULP
The process of collecting performance information on what actions were taken and storing that information for later analysis is called ___?
AUDITING
GUIDS used in the Windows registry to identity objects and record many of their attributes is called ___?
CLASS IDENTIFIERS (CLSIDs)
An international set of standards for functionality and assurance of computer security. This is supersedes the Orange Book as well as other standards and is called ___?
COMMON CRITERIA
The list of access permissions for an object, based on access granted by the object’s owner is called ___?
DISCRETIONARY ACCESS CONTROL LIST (DACL)
A server computer designated to handle Active Directory requests is called ___?
DOMAIN CONTROLLER
Access permissions to an object calculated based on the requesting subjects’ identification and group memberships is called ___?
EFFECTIVE PERMISSIONS
Identification value that is unique across all environments to keep track of an object across many computers is called ___?
GLOBALLY UNIQUE ID (GUID)
A set of named entities that define a group of users for the purposes of defining permissions that apply to multiple users is called ___?
GROUP
A computer network authentication protocol which allows computers to communicate in a secure manner across an insecure network, and the default authentication protocol for Windows. This is called ___?
KERBEROS
A computer designated to authenticate users and, upon authentication, issue Kerberos keys that will allow subjects to access objects is called ___?
KEY DISTRIBUTION CENTER (KDC)
User accounts that are defined using the principle of least privilege is called ___?
LEAST PRIVILEGE USER ACCOUNTS (LUAs)
Authentication protocol used in legacy Windows systems to support secure communication across an insecure network is called ___?
NETWORK TRANSLATION LAN MANAGER (NTLM)
This was one of the early formal standards for computer security. The United States Department of Defense Trusted Computer System Evaluation Criteria (DOD-5200.28-STD) is commonly called ___.
ORANGE BOOK
The practice of providing a user or process with only the necessary access required to carry out a task is called ___?
PRINCIPLE OF LEAST PRIVILEGE
An encryption key that can be shared and does not need to be kept private is called ___?
PUBLIC KEY
A document used by Windows to store all SIDs associated with a process is called ___?
SECURITY ACCESS TOKEN (SAT)
Windows feature that prompts users for a confirmation before escalating to administrator privileges is called ___?
USER ACCOUNT CONTROL
- Which of the following best describes the principle of least privilege?
- Providing the necessary access to carry out any task
- Providing access to the least number of objects possible
- Providing just the necessary access required to carry out a task
- Providing access equivalent to the least populated security group
Providing just the necessary access required to carry out a task
- Which type of user account is designed using the principle of least privilege?
- LUA
- SID
- GUID
- KDC
LUA
- What structure does the Windows operating system use to store collections of permissions for objects?
- ACE
- DACL
- GUID
- CLSID
DACL
- If a regular user is a member of four groups, how many SIDs will be stored in the user’s SAT?
- 1
- 4
- 5
- 6
5
- Which of the following best describes UAC?
- Prompts users before escalating to administrator privileges
- Prevents processes from escalation to administrator privileges
- Terminates programs that attempt to escalate to administrator privileges
- Alerts users that attempts to escalate to administrator privileges have been automatically denied
Prompts users before escalating to administrator privileges
- Which protocol does the Windows operating system use by default to authenticate computers to exchange security information?
- Kerberos
- NTLM
- SAML
- TCP/IP
Kerberos
- When viewing an object’s DACL, which permission indicates that advanced permissions have been set?
- Extended permissions
- Advanced permissions
- Special permissions
- Level II permissions
Special permissions
- Which type of identifier was originally developed to identify ActiveX controls?
- SID
- PID
- CLSID
- GUID
GUID
- Which type of identifier is used to identify user groups?
- SID
- PID
- CLSID
- GUID
SID
- If a user, user A
No, because group B denies read access to helloWorld.c
- Why should you carefully design an auditing strategy before turning auditing on?
- Auditing incomplete information wastes analysis time
- Auditing too much information causes excessive overhead
- Ad-hoc auditing rarely provides useful information
- Audit log files only retain limited information without extensive configuration
Auditing too much information causes excessive overhead
- Which of the following guidelines tend to provide the most useful auditing information?
- Always audit event success and failures
- Never audit both event successes and failures
- Generally audit event failures
- Do not audit event failures unless you first audit event successes
Generally audit event failures
- What tool is most commonly used to view and search audit logs?
- Windows Event Viewer
- Windows Log Viewer
- Windows Audit Viewer
- Window ACL Viewer
Windows Event Viewer
- Which of the following Windows tools replaces previous legacy tools and allows ACL modifications
- Cacls
- Xcacls
- iCacls
- SubInACL
iCacls
- When using AGULP, for which entity type are local object permissions defined?
- User accounts
- Global groups
- Universal groups
- Domain local groups
Domain local groups
