Duplicate of CyberSecStudy - CISSP - Domain #5

This is a method of bypassing normal authentication of a software application.

The point at which the false rejection rate and the false acceptance rate are equal.

This web connection maintains a record of previous web searches and interactions.

This error takes place when a biometric system rejects an authorized individual.

This directory contains data about data.

Access control permissions assigned directly to a specific individual.

Access control permissions assigned to a role or group and the user inherits those Attributes.

This component of SESAME holds a similar role to the KDC in Kerberos.

This is a network attack where a transmission is intercepted and repeated or delayed.

This computer based single sign-on authentication protocol provides a single sign-on capability

When a hacker suspects that a hashing algorithm has been used on a password file.

What it’s called when a system uses two or more of the three authentication factors.

This type of IDS is not good at detecting new, unknown, or zero day vulnerabilities.

A software or hardware device used to monitor host or network events.

A portable identity that enables users of one domain to access the data of another domain.

This scans the colored portion of the eye that surrounds the pupil.

This access control model allows each user to control access to their own data.

The electronic representation of a real-world entity.

The process of recovering passwords from data stored in or transmitted by a computer system.

This component of Kerberos allows one principal to authenticate to another principal.

This component of Kerberos provides an authentication service.

A passive entity that contains information.

A method for allowing a subject to prove its identity.

The creation of IP packets with a forged source IP address.

A control model where access to all objects is centrally managed.

This scans the blood-vessel pattern on the backside of the eyeball.

Any type of wiring that transmits electric signals emits these waves.

A criteria or threshold at which certain activity should be flagged or trigger an alert.

This IDS runs in discovery mode for a period of time before running in active mode.

This allows you to login to one system and gain access to multiple systems and applications.

The flow of information between a subject and an object.

This IPS monitors such things as the system state, system calls, and audit logs on a host.

This allows you to combine multiple directory services.

After identification and authentication, this is what a subject must have to access resources.

This error takes place when a biometric system accepts an unauthorized individual.

The objects of this directory are not actually stored in its directory; they point to the data.

An active entity that requests access to an object or the data within an object.

This IDS/IPS monitors packets of information as they traverse the network from multiple systems

This is what you use to manage the objects listed in a directory.

A method for a person to authenticate their identity by presenting a unique physical attribute.