Section 10

Question 1

What does CIA stand for?

Answer 1

Confidentiality, Integrity, Availability

Question 2

is a process that uses mathematical models to convert readable data( plaintext ) into an unreadable form ( ciphertext )

Answer 2

Encryption

Question 3

is a security mechanism that prevents an individual or entity from denying their participation in a transaction or communication

Answer 3

Non-repudiation

Question 4

What should be exchanged for 2 people to communicate ( hint keys )

Answer 4

Public Keys

Question 5

uses a public and private key

Answer 5

Asymmetric

Question 6

Creates a fixed-sized hash value

Answer 6

Hash

Question 7

used to verify data integrity

Answer 7

Hash

Question 8

2 Common hashes

Answer 8

MD5 and SHA-1

Question 9

include something you know, have, or are

Answer 9

Authentication factors

Question 10

include something you do, exhibit, know, or somewhere you are

Answer 10

Authentication attributes

Question 11

is a security strategy that limits the ability of resource owners to grant or deny access to file system objects (Top secret) (uses labels)

Answer 11

(MAC) Mandatory access control

Question 12

is a cybersecurity model that allows the owner of a resource to control who has access to it and what level of access they have. ( Owner )

Answer 12

( DAC ) Discretionary access control

Question 13

restricts network access based on a person’s role within an organization and has become one of the main methods for advanced access control (Sales) (uses groups)

Answer 13

(RBAC) Role-based access control

Question 14

Uses UDP ports 1812-1813 or UDP 1645-1646

Answer 14

Radius

Question 15

Provides AAA— Authentication, Authorization, and Accounting

Answer 15

Radius

Question 16

Uses TCP port 49

Answer 16

TACACS+

Question 17

Designed to do authentications and authorization for local area networks

Answer 17

Kerberos

Question 18

What is EAP

Answer 18

Extension Authentication Protocol- allows transactional based authentication mechanisms to be able to talk to each other

Question 19

What is EAP PSK

Answer 19

EAP(pre-shared key) has a common key that everybody uses to log in

Question 20

What is PEAP

Answer 20

Protected Extensible Authentication Protocol- uses a standard username and password

Question 21

EAP MD5 uses…

Answer 21

Hash

Question 22

EAP-TLS is…

Answer 22

a single certificate which comes from the server side; then pass to individual clients

Question 23

EAP-TTLS is…

Answer 23

Requires both the individual clients and authenticating system to each have certificates

Question 24

Relies heavily on time stamps

Answer 24

Kerberos

Question 25

Uses Windows active Directory

Answer 25

LAN (Local Area Network)

Question 26

What is SAML

Answer 26

Security Assertion Markup Language- allows a single person to log in to a bunch of different devices; used to manage multiple apps using a single account

Question 27

What is PKI

Answer 27

Public Key Infrastructure- the set of hardware, software, policies, processes, and procedures required to create, manage, distribute, use, store, and revoke digital certificates and public-keys.