Unit 3 - Managing User Security

All points or areas in a system that could be used or compromised to allow hackers entry into the system.

• attack surface

• multifactor authentication

• share permissions

• Role-Based Access Control (RBAC)

Database of the network resources on a Microsoft network.

• Active Directory

• false acceptance rate (FAR)

• Security Account Manager (SAM)

• false rejection rate (FRR)

Physical token inserted into a computer’s USB port.

• dongle

• false rejection rate (FRR)

• false acceptance rate (FAR)

• implicit permissions

Authentication method identifying measurable patterns in human activities.

• behavioral biometrics

• one-time password (OTP)

• Security Account Manager (SAM)

• explicit permissions

Process of validating a user.

• one-time password (OTP)

• multifactor authentication

• Discretionary Access Control (DAC)

• authentication

Security strategy in which a user can be granted additional rights to data beyond what is allowed by his or her assigned access level.

• Discretionary Access Control (DAC)

• false rejection rate (FRR)

• crossover error rate (CER)

• LDAPS

Point where the false acceptance rate and false rejection rate are equal.

• user account control (UAC)

• crossover error rate (CER)

• single sign-on (SSO)

• New Technology File System (NTFS) permissions

Authentication method using measurement and analysis of a biological feature.

• Mandatory Access Control (MAC)

• biometrics

• Active Directory

• federated identity management (FID)

Those a user is given at a specific location, such as a folder or a file.

• Active Directory

• false acceptance rate (FAR)

• explicit permissions

• Mandatory Access Control (MAC)

Ratio of the number of false acceptances divided by the number of identification attempts.

• Security Account Manager (SAM)

• secondary logon

• behavioral biometrics

• false acceptance rate (FAR)