Rule-based access control

A nondiscretionary access control technique that is based on a set of operational rules or restrictions to enforce a least privileges permissions policy.

A basic principle of security stating that something should be allocated the minimum necessary rights, privileges, or information to perform its role.

The process of deploying an account, host, or application to a target production environment. This involves proving the identity or integrity of the resource, and issuing it with credentials and access permissions.

The process of removing an account, host, or application from the production environment. This requires revoking any privileged access that had been assigned to the object.

Security identifier (SID)

The value assigned to an account by Windows and that is used by the operating system to identify that account.

Group policy objects (GPOs)

On a Windows domain, a way to deploy per-user and per-computer settings such as password policy, account restrictions, firewall status, and so on.

The identification or estimation of the physical location of an object, such as a radar source, mobile phone, or Internet-connected computing device.

Time-of-day restrictions

Policies or configuration settings that limit a user's access to resources.

Privileged access management (PAM)

Policies, procedures, and support software for managing accounts and credentials with administrative permissions.

NT LAN Manager (NTLM) authentication

A challenge-response authentication protocol created by Microsoft for use in its products.

Pluggable authentication module (PAM)

A framework for implementing authentication providers in Linux.

A network service that stores identity information about all the objects in a particular network, including users, groups, servers, client computers, and printers.

Lightweight Directory Access Protocol (LDAP)

Protocol used to access network directory databases, which store information about authorized users and their privileges, as well as other organizational information.

Distinguished name (DN)

A collection of attributes that define a unique identifier for any given resource within an X.500-like directory.

Authentication technology that enables a user to authenticate once and receive authorizations for multiple services.

A single sign-on authentication and authorization service that is based on a time-sensitive, ticket-granting system.

Key distribution center (KDC)

A component of Kerberos that authenticates users and issues tickets (tokens).

Ticket Granting Ticket (TGT)

In Kerberos, a token issued to an authenticated account to allow access to authorized application servers.

A process that provides a shared login capability across multiple systems and enterprises. It essentially connects the identity management services of multiple systems.

Identity provider (IdP)

In a federated network, the service that holds the user account and performs authentication.

Security Assertion Markup Language (SAML)

An XML-based data format used to exchange authentication information between a client and a service.

Simple Object Access Protocol (SOAP)

An XML-based web services protocol that is used to exchange messages.

Representational State Transfer (REST)

A standardized, stateless architectural style used by web applications for communication and integration.

Open Authorization (OAuth)

A standard for federated identity management, allowing resource servers or consumer sites to work with user accounts created and managed on a separate identity provider.

JavaScript Object Notation (JSON)

A file format that uses attribute-value pairs to define configurations in a structure that is easy for both humans and machines to read and consume.

A private network facility that is owned and operated by an organization for use by its employees only.

Network topology enforced by switch, router, and firewall configuration where hosts on one network segment are prevented from or restricted in communicating with hosts on other segments.

Internet Protocol (IP)

Network (Internet) layer protocol in the TCP/IP suite providing packet addressing and routing for all higher-level protocols in the suite.

A logical network segment comprising a broadcast domain established using a feature of managed switches to assign each port a VLAN ID. Even though hosts on two VLANs may be physically connected to the same switch, local traffic is isolated to each VLAN, so they must use a router to communicate.

An area of the network (or of a connected network) where the security configuration is the same for all hosts within it. In physical security, an area separated by barriers that control entry and exit points.

The points at which a network or application receive external connections or inputs/outputs that are potential vectors to be exploited by a threat actor.

Preventing a device attached to a switch port from communicating on the network unless it matches a given MAC address or other protection profile.

Applying an access control list to a switch or access point so that only clients with approved MAC addresses can connect to it.

A standard for encapsulating EAP communications over a LAN (EAPoL) or WLAN (EAPoW) to implement port-based authentication.

In EAP architecture, the device requesting access to the network.

A PNAC switch or router that activates EAPoL and passes a supplicant's authentication data to an authenticating server, such as a RADIUS server.

Extensible Authentication Protocol (EAP)

Framework for negotiating authentication methods that enable systems to use hardware-based identifiers, such as fingerprint scanners or smart card readers, for authentication and to establish secure tunnels through which to submit credentials.

Remote Authentication Dial-In User Service (RADIUS)

AAA protocol used to manage remote and wireless authentication infrastructures.

A type of network isolation that physically separates a host from other hosts or a network from all other networks.

Processing, memory, storage, and networking resources that allow a host or network appliance to handle a given workload.

The ability of a system to process a task or workload within an acceptable amount of time.

Property by which a computing environment is able to gracefully fulfill its ever-increasing resource needs.

151-200 Security and Access Control Concepts Flashcards

Student preview

49 questions

Show all answers

1.

FLASHCARD QUESTION

Front

Attestation

Back

Capability of an authenticator or other cryptographic module to prove that it is a root of trust and can provide reliable reporting to prove that a device or computer is a trustworthy platform.

2.

FLASHCARD QUESTION

Front

Permissions

Back

Security settings that control access to objects including file system items and network resources.

3.

FLASHCARD QUESTION

Front

Discretionary access control (DAC)

Back

An access control model where each resource is protected by an access control list (ACL) managed by the resource's owner (or owners).

4.

FLASHCARD QUESTION

Front

Mandatory access control (MAC)

Back

An access control model where resources are protected by inflexible, system-defined rules. Resources (objects) and users (subjects) are allocated a clearance level (or label).

5.

FLASHCARD QUESTION

Front

Role-based access control (RBAC)

Back

An access control model where resources are protected by ACLs that are managed by administrators and that provide user permissions based on job functions.

6.

FLASHCARD QUESTION

Front

Group account

Back

A collection of user accounts that is useful when establishing file permissions and user rights because when many individuals need the same level of access, a group could be established containing all the relevant users.

7.

FLASHCARD QUESTION

Front

Attribute-based access control (ABAC)

Back

An access control technique that evaluates a set of attributes that each subject possesses to determine if access should be granted.

Access all questions and much more by creating a free account

Create resources

Host any resource

Get auto-graded reports

Continue with Google

Continue with Email

Continue with Classlink

Continue with Clever

or continue with

Microsoft

Apple

Others

Already have an account?

Similar Resources on Wayground

42 questions

Introducción al Derecho de Familia

Flashcard

•

12th Grade

51 questions

La Reforma en Francia PART VII

Flashcard

•

12th Grade

35 questions

Flashcards - Continente asiático e China

Flashcard

•

KG - University

34 questions

BÀI 3-HSK 4

Flashcard

•

University

54 questions

Reviewer-ITSM

Flashcard

•

KG - University

37 questions

BOH4M Unit 1- Foundations of Management_MR_T

Flashcard

•

12th Grade

35 questions

Guiding Children's Behavior

Flashcard

•

University

Popular Resources on Wayground

15 questions

Fractions on a Number Line

Quiz

•

3rd Grade

20 questions

Equivalent Fractions

Quiz

•

3rd Grade

25 questions

Multiplication Facts

Quiz

•

5th Grade

54 questions

Analyzing Line Graphs & Tables

Quiz

•

4th Grade

$fractions$

22 questions

fractions

Quiz

•

3rd Grade

20 questions

Main Idea and Details

Quiz

•

5th Grade

20 questions

Context Clues

Quiz

•

6th Grade

15 questions

Equivalent Fractions

Quiz

•

4th Grade

Discover more resources for Computers

20 questions

CompTIA Network+ - Ports and Protocols

Quiz

•

University