Microsoft Security Fundamentals Chapter 2

Security groups that are created automatically when you create an Active Directory domain

Attempted illegal entry to a computer using a headword list to generate possible passwords.

NTFS (New Technology File System) is

Authentication protocol allows nodes communicating over a non-secure network to prove identity

A useful type of directory object contained within domains is the organizational unit. 

 A feature of trusted systems used for security or social control.

That which is morally correct, just, or honorable.

Security system that requires more than 1 method of authentication from independent credentials

Any function that can be used to map data of arbitrary size to data of fixed size

What is a permission?

A password is a secret word or phrase that must be used to gain admission to something.

Calculates the permissions that are granted to the specified user or group.

A brute force attack is a cryptanalytic attack that may be used against any encrypted data.

Variable value that is applied using an algorithm.

Security technology for establishing an encrypted link between a web server & a browser

Asymmetric Encryption is a form of Encryption where keys come in pairs.

Share and NTFS Permissions on a File Server

Hidden network shares created by Windows NT family to give security admins remote access are:

Tracks & records operations & activities by accounts while in a system or working environment.

Permissions that are set by default when the object is created, or by user action.

NTFS permissions are available to drives formatted with NTFS.

Relationship created on a computer that identifies a user & its settings & permissions

Process of converting encrypted data back into its original form, so it can be understood.

Performs bit-level full volume encryption and extends its use to removable storage devices.

The person or group responsible for applying security policies to an information object.

An access control list is a list of access control entries.

Permissions that are given to an object because it is a child of a parent object.

Microsoft Management Console snap-in to centrally manage file shares on a computer.

Collection of information that tells Windows which files and folders you can access.

Service that Microsoft developed for Windows domain networks.

A digital signature is a mathematical scheme for demonstrating the authenticity of documents.

A network that is constructed by using public wires to connect to a private network.

Ensuring a party to a contract or communication cannot deny the authenticity of their signature

1 of 2 common methods using a public key infrastructure for maintaining access to servers.

Procedures needed to create, manage, distribute, use, store, and revoke digital certificates

Hierarchical database that stores low-level settings for the Microsoft Windows operating system

Encoding a message so that it can be read only by the sender & the intended recipient

Syslog is a widely used standard for message logging.

 A secret key, which can be a number, a word, or just a string of random letters

Small hardware device that the owner carries to authorize access to a network service.

User rights are assigned to determine what members of that group have permission to do.

A numeric password used to authenticate a user to a system

A computer that runs an operating system in the Windows 2000 or 2003 Server family 

Database present on Windows Server 2003 that stores user accounts & security descriptors

Any process by which a system verifies the identity of a User who wishes to access it.

Measuring and analysis of such physical attributes as facial features & voice or retinal scans

Protocol suite for secure (IP) communications by authenticating and encrypting each IP packet.

Sequence of related digital certificates used to verify the validity of a digital certificate.

Authentication & session security protocols used in various Microsoft network implementations

Means by which consumers and businesses can utilize Public Key Infrastructure

Device that includes an embedded integrated circuit

Takes full advantage of service security features of Windows & Microsoft Active Directory

A session/user authentication process that permits a user to enter one name and password

An established relationship between a user and a computer, network or information service.

Server running a version of the Windows Server® operating system and has Active Directory.

Auditing is an official financial examination of an individual's or organization's accounts.