Security Technologies Flashcards
User can view the contents of a folder and any subfolders. User can view the contents of the file.
Read Permission
Read permission, plus the user can add files and create new subfolders. Read permission, plus the user can make changes (write) to the file.
Write Permission
Read permission, plus the user can run executable files contained in the folder. This permission is inherited by any subfolders and files. Read permission, plus the user can run a file if it is executable.
Read & Execute Permission
Read permission, plus the user can run executable files contained in the folder. This permission is inherited by subfolders only.
List Folder Contents Permission
Read and Write permissions, plus the user can delete the folder. Read and Write permissions, plus the user can delete the file.
Modify Permission
Read, Write, and Modify permissions and the user can delete all files and subfolders. Read, write, modify, and delete the file.
Full Control Permission
A user’s permissions are the sum of the permissions they have been assigned individually and obtained through any groups in which they are a member.
effective permissions
Syntax to modify file or folder attributes
attrib.exe
ATTRIB [ + attribute | - attribute ] [pathname] [/S [/D]]
What are the permission types on Linux?
Read (r): User can view the contents of a file.
Write (w): User can write to (modify) the contents of a file or directory.
Execute (x): User can run an executable file and view the contents of a directory.
In Linux, the person who is responsible for the file.
Owner
In Linux, includes members of the file’s group.
Group
In Linux, includes all users who are not in the file or folder’s group or the owner.
Others
Syntax for allowing all permissions in Linux
drwxrwxrwx.
Component included with many Linux distributions allows more options for setting file and folder permissions
Security Enhanced Linux (SELinux)
Default Share permission assigned to the Everyone group
Read
Default Share permission assigned to the Administrators group on the local computer
Full Control
Character at the end of the share name indicates that is a hidden share.
$
Permissions assigned to a parent object that flow down and apply to a child object.
Inherited permissions
This command allows you to copy objects while preserving their existing permissions.
xcopy
Option that allows the change of permissions to be applied to all sub folders
Propagating Permissions
A MMC snap-in (also available in Computer Management) which allows you to centrally manage users and groups on the computer. You can use it to create, rename, or delete users and groups; add users to groups; and set other user settings such as password policies, logon scripts, and folder locations.
Local Users and Groups
A utility which allows you to configure a wide range of security settings for the local computer, including those related to account management, default user rights, network functions, and so on. It works primarily by changing registry settings, but provides a much safer and more focused interface than REGEDIT
Local Security Policy
A utility which allows you to edit group policies for the entire computer
Local Group Policy Editor
A database which stores user passwords and performs authentication of local users
Security Account Manager
A Control Panel utility which allows individual users to access their stored user names, passwords, and certificates
Credential Manager
Notifies you when an action will change Windows settings and gives you an option to stop
User Account Control
A feature that runs in the background to protect critical system files, folders, and registry keys from unplanned alterations
Windows Resource Protection
Three network protocols associated w/ Active Directory?
LDAP - resource directory services
Kerberos - SSO authentication through the domain
DNS - mapping the server namespace