SP20 CTI 120 Final Exam Review

The local database used to store account information.

A cloud service model where the vendor provides everything except the application software.

Isolates and hardens user security information in a Windows environment.

Detects a network attack and notifies network administrator.

Authorized users who are incorrectly denied access due to biometric authentication.

File system used by Windows devices such as Windows 10.

Not being able to deny taking an action.

A risk response where you take action to reduce the likelihood or impact of a risk.

This area is behind a firewall. Public accessible servers are placed in this area.

Type of server acts as a go-between a private & public network evaluating requests from clients

This is used to prevent forged DNS data.

Centralized authentication, authorization & acctg to connect computers to a network

Firewall that looks at the packet header as the packet traverses the firewall.

Encryption algorithm that uses one shared key.

A scheme used to demonstrate authenticity of sender of a message.

A tunneling protocol best for airport or hotel users where a connection may drop often.

A type of password attack where every possible combination of characters is tried.

A risk response where you move the responsibility to a third party.

An authentication protocol that uses tickets and secret keys to authenticate users.

Attack that takes advantage of the TCP three way handshake.

A type of virus that changes its code so it cannot be easily detected.

Windows 10 biometric authentication system.

Used to trap hackers.

This is used to assist create profiles for VPN clients.

Windows feature to prevent unauthorized changes by standard users such as installing programs.

This is used for strong authentication of wireless devices connecting to a WLAN.

Used in a Windows environment to limit applications that can run or what they can do.

Program designed to gain administrator level control. Can hide files from other users.

This is used to deploy Windows updates to an organization.

Security principle where a user is given no more access than necessary to perform their job.

Authentication protocol that uses plain text. Least secure.

Malware that is spread through a network. Self replicates.

The methods or avenues an attack can use to enter a system and cause damage.

Proving you are who you say you are. Often with a username and password.

Strongest wireless security.

Type of permission granted directly to a file or folder.

Email validation system designed to prevent unauthorized users from sending email from a domain

A tunneling protocol that uses port 443.

Process of giving individuals access to system objects based on their identity.

Protocol used for a secure web site.

Security principle where no one person has full access to all functions of a critical process.

A tunneling protocol that has weak encryption.

An attack that prevents a legitimate user from accessing resources.

A security policy that describes constraints & practices the user must accept to access corporate network & resources.

Used to encrypt an entire drive.

Authorizes a user to perform certain actions on a computer such as running a back up.

A risk response where you choose not to engage in the activity.

Type of cloud commonly shared between two organizations.

An example of this is a person's social security number.

This goal of information security is making a resource available when required.

Device at layer 2 of the OSI model.

Type of Domain Controller placed in an unsecure area.

Example of multifactor authentication.

First line of defense.

This goal of information security ensures information is protected from changes.

Used to verify integrity. One way algorithm

A mass email that tries to trick a user to click on a link and supply confidential information.

Method of gaining access using people skills.

This goal of security keeps information, networks and systems secure from unauthorized access.

Attack when the developer finds out about the vulnerability the same day as the attack occurs.

Default firewall configuration.

Used to share data with vendors and third party organizations.

Required to be able to use Bitlocker.

A logical network created by a switch. Used to group hosts logically.

An electronic document that contains an identity and a corresponding public key.