IAS Finals Reviewer

method by which systems determine whether and how to admit a user into a trusted area of the organization—that is, information systems, restricted areas such as computer rooms, and the entire physical location.

• Entry Control
• Permission Management
• User Authentication
• Access Control

In information security, a combination of hardware and software that filters or prevents specific information from moving between the outside network and the inside network.

• Firewall
• Antivirus
• Encryption
• Router

private data network that uses the public telecommunications infrastructure to create a means for private communication via a tunneling protocol coupled with security procedures

• Virtual Protected Network (VPN)
• Virtual Public Network (VPN)
• Virtual Private Network (VPN)
• Virtual Personal Network (VPN)

In general, all access control approaches rely on the following four mechanisms, which represent the four fundamental functions of access control systems:

• Identification, Authentication, Authorization,

  Accountability

• Authentication, Authorization, Auditing, Encryption

• Identification, Validation, Permission, Monitoring

• Authentication, Authorization, Auditing, Accountability

Which of the following are architectural implementations of firewalls?

• Single Bastion Hosts, Screened Host Firewalls, Screened Subnet Firewalls

• Network-based, Host-based, Application-based

• Static, Dynamic, Hybrid

• Inbound, Outbound, Bothway

The general term for a system that can both detect and modify its configuration and environment to prevent intrusions. It encompasses the functions of both intrusion detection systems and intrusion prevention technology.

• Intrusion Detection and Prevention Service (IDPS)
• Intrusion Detection and Prevention Software (IDPS)
• Intrusion Detection and Protection System (IDPS)
• Intrusion Detection and Prevention System (IDPS)

An adverse event in which an attacker attempts to gain entry into an information system or disrupt its normal operations, almost always with the intent to do harm.

• Data breach
• Phishing attack
• Malware infection
• Intrusion

A system capable of automatically detecting an intrusion into an organization’s networks or host systems and notifying a designated authority.

• Intrusion Detection Alert
• Unauthorized Access Notifier
• Intrusion Detection System (IDS)
• Network Breach Detection System

The system fails to detect and respond to a genuine security threat.

• false negative

• false positive

• false attack stimulus

To reduce the number of false positives by prioritizing and consolidating alerts.

• alarm filtering

• false positive

• false attack stimulus