MTA Security Fundamental Day 3

The process of restricting access to a resource to only permitted users

• access control
• cracked password
• personal identification number (PIN)
• registry

The exposure

• attack surface
• digital signature
• risk acceptance
• risk mitigation

The process of identifying an individual

• authentication
• DMZ (demilitarized zone)
• risk avoidance
• risk

The process of giving individuals access to system objects based on their identity.

• authorization
• DNS poisoning
• risk management
• Role

A type of attack that tries as many possible combinations of characters as time and money permit.

• brute force attack
• domain user
• Role
• security baseline

The characteristic of a resource ensuring access is restricted to only permitted users

• confidentiality
• explicit permission
• security policy
• single sign on (SSO)

is traffic that originates from outside the network's routers and proceeds toward a destination inside the network

• ingress traffic
• NTFS Permission
• registry
• keylogger

Ensuring the consistency is maintained by authorized users

• integrity

• NTLM

• residual risk

• Line of Business (LOB) apps

Prevents one party from denying the actions it has carried out.

• nonrepudiation
• risk assessment
• single sign on (SSO)
• password policy

Taking steps to reduce the likelihood or impact of a risk.

• risk mitigation
• Syslog
• asymmetric encryption
• Security Compliance Manager 4.0 (SCM 4.0)