Access Control Unit 2

The process of restricting access to a resource to only permitted users

• access control
• cracked password
• personal identification number (PIN)
• registry

Refers to the number of incorrect logon attempts permitted before a system locks an account. Each bad logon attempt is tracked by the bad logon counter

• account lockout
• Credential Guard
• polymorphic virus
• removable device

Also known as auditing

• accounting
• decryption
• principle of least privilege
• residual risk

The exposure

• attack surface
• digital signature
• risk acceptance
• risk mitigation

Also known as accounting

• auditing
• Discretionary Access Control
• risk assessment
• risk transfer

The process of identifying an individual

• authentication
• DMZ (demilitarized zone)
• risk avoidance
• risk

The process of giving individuals access to system objects based on their identity.

• authorization
• DNS poisoning
• risk management
• Role

Describes a resource being accessible to a user

• availability
• DNS Security Extensions (DNSsec)
• risk mitigation
• Secure Content Management (SCM)

An authentication method that identifies and recognizes people based on physical traits

• biometrics
• DNS spoofing
• risk transfer
• Secure Sockets Layer (SSL)

A type of attack that tries as many possible combinations of characters as time and money permit.

• brute force attack
• domain user
• Role
• security baseline