ESS Full EOC Review

describes the constraints and practices that users must agree to in order to access the corporate network

• acceptable use policy
• computer account
• permission
• principle of least privilege

A list of all users and groups that have access to an object.

• access control list (ACL)
• confidentiality
• personal firewall
• public key infrastructure (PKI)

The process of restricting access to a resource to only permitted users

• access control
• cracked password
• personal identification number (PIN)
• registry

Refers to the number of incorrect logon attempts permitted before a system locks an account. Each bad logon attempt is tracked by the bad logon counter

• account lockout
• Credential Guard
• polymorphic virus
• removable device

Also known as auditing

• accounting
• decryption
• principle of least privilege
• residual risk

Active Directory is a directory service technology created by Microsoft that provides a variety of network services

• Active Directory
• defense in depth
• public key infrastructure (PKI)
• right

A shared folder typically used for administrative purposes.

• administrative share
• Device Guard
• registry
• risk acceptance

Also known as proxy servers. Works by performing a deep inspection of application data as it traverses the firewall. Rules are set by analyzing client requests and application responses

• application level firewall
• dictionary attack
• removable device
• risk assessment

enables you to control how users access and use programs and files and extends the functionality originally provided by the Software Windows 10 only. located in the Local Group Policy Editor

• AppLocker
• dictionary attack
• residual risk
• risk avoidance

Also known as public key cryptography

• asymmetric encryption
• digital certificate
• right
• risk management