Week 9

Question 1

flow of information between a subject and object

jpresuello

Answer 1

Access

Question 2

What is IA3?

jpresuello

Answer 2

Identification, Authentication, Authorization, Accountability

Question 3

Entering public information is …..; Entering private information is …..;

jpresuello

Answer 3

identification; authentication

Question 4

A flaw in software whereby actions can be preformed out of sequence

jpresuello

Answer 4

Race Condition

Question 5

broad term that encompasses the use of different
products to identify, authenticate, and authorize users through automated means.

jpresuello

Answer 5

Identity Management

Question 6

single database for user attributes

jpresuello

Answer 6

Directory

Question 7

stores attributes from many sources in one location

jpresuello

Answer 7

Meta Directory

Question 8

LDAP stands for

jpresuello

Answer 8

Lightweight Directory Access Protocol

Question 9

One password used across multiple systems

jpresuello

Answer 9

Password Synchronization

Question 10

Two types of biometric authentication

jpresuello

Answer 10

Physical and behavioral

Question 11

Authorization Principles

jpresuello

Answer 11

Deny by Default and Principle of Least Privilege

Question 12

Three primary authorization models

jpresuello

Answer 12

Object Capability, Security Labels, Access Control lists

Question 13

A protocol for authenticating service requests between trusted hosts across an untrusted network

jpresuello

Answer 13

Kerberos

Question 14

provisioning methodology that elevates users to the
necessary privileged access to perform a specific task.

jpresuello

Answer 14

Just in Time Access