SecurityFundamentalsVocabReviewDay1

The process of eliminating a risk by choosing not to participate in an action or activity describes which of the following?

• Risk avoidance

• Risk mitigate

• Residual risk

• Risk acceptance

Describes the constraints and practices that users must agree to in order to access the corporate network, corporate resources, and the internet

• Acceptable use policy

• Password policy

• Security policy

• Virtual secure mode (VSM)

Refers to the number of incorrect logon attempts permitted before a system locks an account. Each bad logon attempt is tracked by the bad logon counter, and when the counter exceeds the account lockout threshold, no further logon attempts are permitted.

• account lockout

• credential guad

• fine-grained password policy

• password setting object (PSO)

A Windows security mechanism that protects security tokens by storing them in a virtual container separate from other processes

• security policy

• password settings object (PSO)

• virtual secure mode (VSM)

• group policy object (GPO)

A password that gets access to an encrypted password file from a workstation or server. Once he or she has access, the attacker starts running password cracking tools against the file, with an eye toward breaking as many passwords as possible and leveraging them to further compromise the company’s network and systems.

• password policy

• cracked password

• sniffers

• strong password

A password that is hard to guess because it is long and has a mix of different types of characters. It also has random enough where it could not be easily guessed.

• strong password

• cracked password

• password settings policy (PSO)

• password policy

A specially designed software (and in some cases hardware) applications that capture network packets as they traverse a network, displaying them for the attacker.

• sniffers

• device guard

• credential guard

• virtual secure mode (VSM)

In the Windows Server 2016 environment, these password setting objects can be created and applied by using the Active Directory Administrative Center (ADAC) or Windows PowerShell.

• password policy

• password settings object (PSO)

• group policy object (GPO)

• virtual secure mode (VSM)

A written document that describes how a system, organization, or other entity is secured.

• security policy

• password policy

• fine-grained password policy

• acceptable use policy

A set of rules that allow an administrator granular control over the configuration of objects in Active Directory (AD), including user accounts, operating systems, applications, and other AD objects.

• group policy object (GPO)

• acceptable use policy

• password settings object (PSO)

• device guard