ISC2 - Study Notes 7 Flashcards
refers to the privileges granted to users, and following the principle of least privilege.
Entitlement
Removing a user from a group immediately removes all the privileges assigned to the user as a member of that group. If processes aren’t in place to monitor entitlement, users end up having more privileges than they need to perform their jobs.
info
refers to disabling and deleting inactive accounts. At a minimum, inactive accounts need to be disabled. When it’s determined that the account is no longer needed, it should be deleted.
Account de-provisioning
Physical Layer : data arrives as BITS (ones and zeros)
Data Link Layer : packages data in FRAMES.
Data traveling on the Network layer is packaged and transmitted as PACKETS.
Data traveling on the Transport layer is packaged and transmitted as SEGMENTS.
Info
use radio frequency transmissions to broadcast signals over the air. Because they travel over the air, they are the easiest to intercept.
Wireless Transmissions
Twisted pair This is the most commonly used media for data transmissions. Unshielded twisted pair (UTP) does not have shielding and is susceptible to electromagnetic interference (EMI) and radio frequency interference (RFI). Shielded twisted pair (STP) provides protection against EMI and RFI.
Cable Info
Coaxial cable is similar to the cable used for cable television.
The Logical Link Control sublayer interacts with the Network layer.
Info
Routers use access control lists (ACLs) for basic packet filtering to control traffic. An ACL can block or allow traffic based on IP addresses, logical ports, and even some protocols such as Internet Protocol security (IPsec, identified with protocol numbers 50 and 51).
Info
The Session layer establishes and maintains sessions between applications or software processes on the local and remote systems. It keeps the session information for one application separate from the session information from other applications. Remote Procedure Call (RPC) is one of the few protocols that operates directly on this layer. Applications can use RPC to request a service from an application running on a different computer. Data traveling on the application, presentation, and session layers is packaged and named protocol data units (PDUs).
Info
standardizes data presentation for the application layer. Some data encryption and decryption occurs at this layer. Additionally, data can be compressed and decompressed at this layer for better network performance.
The Presentation layer
