CISSP - Domain #5 // Fryer

The electronic representation of a real-world entity.

A control model where access to all objects is centrally managed.

This IPS monitors such things as the system state, system calls, and audit logs on a host.

The process of recovering passwords from data stored in or transmitted by a computer system.

This allows you to combine multiple directory services.

This IDS runs in discovery mode for a period of time before running in active mode.

This directory contains data about data.

This type of IDS is not good at detecting new, unknown, or zero day vulnerabilities.

This component of Kerberos provides an authentication service.

This component of Kerberos allows one principal to authenticate to another principal.

This component of SESAME holds a similar role to the KDC in Kerberos.

The flow of information between a subject and an object.

This is what you use to manage the objects listed in a directory.

The creation of IP packets with a forged source IP address.

The point at which the false rejection rate and the false acceptance rate are equal.

A passive entity that contains information.

This IDS/IPS monitors packets of information as they traverse the network from multiple systems

This allows you to login to one system and gain access to multiple systems and applications.

The objects of this directory are not actually stored in its directory; they point to the data.

An active entity that requests access to an object or the data within an object.

What it’s called when a system uses two or more of the three authentication factors.

This error takes place when a biometric system rejects an authorized individual.

Access control permissions assigned directly to a specific individual.

This scans the blood-vessel pattern on the backside of the eyeball.

This web connection maintains a record of previous web searches and interactions.

When a hacker suspects that a hashing algorithm has been used on a password file.

This error takes place when a biometric system accepts an unauthorized individual.

A method for a person to authenticate their identity by presenting a unique physical attribute.

Access control permissions assigned to a role or group and the user inherits those Attributes.

A portable identity that enables users of one domain to access the data of another domain.

A criteria or threshold at which certain activity should be flagged or trigger an alert.

This access control model allows each user to control access to their own data.

A software or hardware device used to monitor host or network events.

A method for allowing a subject to prove its identity.

This is a method of bypassing normal authentication of a software application.

After identification and authentication, this is what a subject must have to access resources.

This computer based single sign-on authentication protocol provides a single sign-on capability

This scans the colored portion of the eye that surrounds the pupil.

This is a network attack where a transmission is intercepted and repeated or delayed.

Any type of wiring that transmits electric signals emits these waves.