Access Control InClass Rvw

The process of restricting access to a resource to only permitted users

• access control
• cracked password
• personal identification number (PIN)
• registry

Refers to the number of incorrect logon attempts permitted before a system locks an account. Each bad logon attempt is tracked by the bad logon counter

• account lockout
• Credential Guard
• polymorphic virus
• removable device

Also known as auditing

• accounting
• decryption
• principle of least privilege
• residual risk

The process of identifying an individual

• authentication
• DMZ (demilitarized zone)
• risk avoidance
• risk

An authentication method that identifies and recognizes people based on physical traits

• biometrics
• DNS spoofing
• risk transfer
• Secure Sockets Layer (SSL)

A type of attack that tries as many possible combinations of characters as time and money permit.

• brute force attack
• domain user
• Role
• security baseline

A form of attach which attempts all words in one or more dictionaries. Lists of common passwords are also typically tested.

• dictionary attack
• Honey net
• sniffers
• STRIDE

The default domain computer network authentication protocol, which allows hosts to prove their identity over a non-secure network in a secure manner

• Keberos

• NTLM

• Challenge Response

• Password

Actual permissions when logging in and accessing a file or folder. They consist of explicit permissions plus any inherited permissions

• Effective Permissions

• Inherited Permissions

• Access Control

• Rights

The preferred file system for today’s Windows operating system

• FAT32

• NTFS

• File Explorer

• Flat File