network security

Question 1

RBAC and various types

Answer 1

Role based access control:

a) DAC discretionary access control (owner determines who has permissions)
b) MAC mandatory access control (computer determines who has permissions through data labels (high/med/low trust level –> military)
c) RBAC - role based access control: based on the groups of people –> what files do the group need to access

Question 2

Kerberos

port

function

Answer 2

mainly udp (but tcp for larger tickets) on port 88

ticket-based Windows authentication server: grants TGT (ticket granting ticket)
- mutual authentication through domain controller

Question 3

RADIUS

what is is? which standards?

port

Answer 3

Remote Authentication Dial-in User Service

AAA server, using 802.1x and EAP

port UDP 1645 authentication msg
port UDP 1646 accounting msg

Question 4

RADIUS

what is is? which standards?

port

Answer 4

Remote Authentication Dial-in User Service

AAA server, using 802.1x and EAP

port UDP 1645 authentication msg
port UDP 1646 accounting msg

Question 5

EAP

what are the different types

Answer 5

Extensible Authentication Protocol: allows for numerous different mechanism of authentication (passwords, S