process of restricting access to specific portions of the system

matching user authentication credentials against the access control matrix

process uses fields in packet IP/TCP headers to determine what to do

set of if-then rules to determine what to do with incoming packets

process of examining logs to identify evidence of possible attacks

separate network located outside the IS for controlled access from internet

Deep packet inspection

process that examines data in the body of a TCP packet to control traffic

Intrusion detection system

system that creates logs of all network traffic through the firewall

Modifying endpoint default configurations to delete unnecessary settings

verifying the identity of the person or device attempting access

Multifactor authentication

use of two or more types of authentication credentials

Access control matrix

table used to implement authorization controls

decoy system for early warning of search for confidential information

Intrusion prevention system

software or hardware that monitors traffic flow patterns to block attacks

program designed to take advantage of a known vulnerability

device to read source and destination address fields in IP packet headers

Time-based model of security

combination of controls that protect long enough to thwart attack

code released by software developers to fix vulnerabilities

device that connects IS to the internet

device that controls inbound and outbound communcation

physical or behavioral characteristic

Multimodal authentication

use of two or more of the same type of authentication credentials

Vulnerability scanner

automated tool to identify system vulnerabilities

process of regularly applying patches and software updates

studbud

Information Security

25 termsStudBud Administration997 plays

Imported from external platform

Flashcards25 cardsFPractice quizPHost liveL

Questions 25

Answers

1
Authorization
use of two or more types of authentication credentials
process of restricting access to specific portions of the system
wedding ring
use of two or more of the same type of authentication credentials
2
Compatibility test
verifying the identity of the person or device attempting access
a pre-nup agreement
matching user authentication credentials against the access control matrix
table used to implement authorization controls
3
Packet filtering
process uses fields in packet IP/TCP headers to determine what to do
a tea bag
process of examining logs for evidence of possible attacks
process that examines data in the body of a TCP packet to control traffic
4
Access control list
table used to implement authorization controls
set of if-then rules to determine what to do with incoming packets
left swipe on a dating app
device or software that controls inbound and outbound communication
5
Log analysis
process of examining logs to identify evidence of possible attacks
system that creates logs of all network traffic through the firewall
method for verifying identity of users attempting to connect via dial-in
determining tree species by examining its grain
6
Demilitarized zone
a neutral area between enemies
software or hardware to monitor patterns in traffic flow and block attacks
separate network located outside the IS for controlled access from internet
automated tool to identify system vulnerabilities
7
Deep packet inspection
process that examines data in the body of a TCP packet to control traffic
fortune telling by reading patterns left by tea leaves
process of examining logs for evidence of possible attacks
process uses fields in packet IP/TCP headers to determine what to do
8
Intrusion detection system
method for verifying identity of users attempting to connect via dial-in
system that creates logs of all network traffic through the firewall
a small, yappy dog
process of examining logs to identify evidence of possible attacks
9
Hardening
code released by software developers to fix vulnerabilities
process of making steel
Modifying endpoint default configurations to delete unnecessary settings
an authorized attempt to break into an entity's IS
10
Authentication
process of restricting access to specific portions of the system
comparing student resumes to official transcripts
verifying the identity of the person or device attempting access
physical or behavioral characteristic
11
Multifactor authentication
use of two or more types of authentication credentials
process of restricting access to specific portions of the system
comparing student resumes to official transcripts and SS record
use of two or more of the same type of authentication credentials
12
Access control matrix
table used to implement authorization controls
a feature in sci-fi movies
device or software that controls inbound and outbound communication
standard method for verifying identity of users connecting via dial-in
13
Honeypot
program designed to take advantage of a known vulnerability
Pooh's favorite food
decoy system for early warning of search for confidential information
Workstations, printers, servers and other devices in a network
14
Intrusion prevention system
a guard dog
system that creates logs of all network traffic through the firewall
separate network located outside the IS for controlled access from internet
software or hardware that monitors traffic flow patterns to block attacks
15
Exploit
an authorized attempt to break into an entity's IS
program designed to take advantage of a known vulnerability
high adventure
using a browser to remotely access software, data storage, and applications
16
Router
device that controls inbound and outbound communcation
device that connects IS to the internet
device to read source and destination address fields in IP packet headers
a GPS-based software
17
Time-based model of security
process of examining logs to identify evidence of possible attacks
employing retirees to watch the exits
system that creates logs of all network traffic
combination of controls that protect long enough to thwart attack
18
Patch
code released by software developers to fix vulnerabilities
fabric used to mend a tear
program flaws exploited to crash or take control of a system
program designed to take advantage of a known vulnerability
19
Border router
device that controls inbound and outbound communcation
a shepherd's companion
device that connects IS to the internet
device to read source and destination address fields in IP packet headers
20
Firewall
device to read source and destination address fields in IP packet headers
device that connects IS to the internet
a chemical retardant used to slow a wildfire
device that controls inbound and outbound communcation
21
Biometric identifier
process of restricting access to specific portions of the system
a person's resting heart rate
verifying the identity of the person or device attempting access
physical or behavioral characteristic
22
Multimodal authentication
showing passport and utility bill at immigration
use of two or more of the same type of authentication credentials
process of restricting access to specific portions of the system
use of two or more types of authentication credentials
23
Vulnerability scanner
a group therapy session
device that connects IS to the internet
device that controls inbound and outbound communcation
automated tool to identify system vulnerabilities
24
Patch management
team responsible for dealing with major security incidents
process of regularly applying patches and software updates
a seamstress
code released by software developers to fix vulnerabilities
25
Defense in depth
process of restricting access to specific portions of the system
multiple layers of control
using two or more of the same type of authentication credentials
BYU football team's defensive front four

Information Security Flashcards | StudBud