CyberSecStudy - CISSP - Domain #5

A method for allowing a subject to prove its identity.

This is a method of bypassing normal authentication of a software application.

A criteria or threshold at which certain activity should be flagged or trigger an alert.

Access control permissions assigned to a role or group and the user inherits those Attributes.

This IDS runs in discovery mode for a period of time before running in active mode.

This is what you use to manage the objects listed in a directory.

This allows you to combine multiple directory services.

The electronic representation of a real-world entity.

This type of IDS is not good at detecting new, unknown, or zero day vulnerabilities.

This IDS/IPS monitors packets of information as they traverse the network from multiple systems

This component of Kerberos provides an authentication service.

A portable identity that enables users of one domain to access the data of another domain.

This web connection maintains a record of previous web searches and interactions.

When a hacker suspects that a hashing algorithm has been used on a password file.

What it’s called when a system uses two or more of the three authentication factors.

This scans the blood-vessel pattern on the backside of the eyeball.

This scans the colored portion of the eye that surrounds the pupil.

Any type of wiring that transmits electric signals emits these waves.

The point at which the false rejection rate and the false acceptance rate are equal.

A passive entity that contains information.

This computer based single sign-on authentication protocol provides a single sign-on capability

An active entity that requests access to an object or the data within an object.

Access control permissions assigned directly to a specific individual.

This access control model allows each user to control access to their own data.

This component of SESAME holds a similar role to the KDC in Kerberos.

This directory contains data about data.

The process of recovering passwords from data stored in or transmitted by a computer system.

This component of Kerberos allows one principal to authenticate to another principal.

The creation of IP packets with a forged source IP address.

The flow of information between a subject and an object.

This allows you to login to one system and gain access to multiple systems and applications.

This is a network attack where a transmission is intercepted and repeated or delayed.

This error takes place when a biometric system accepts an unauthorized individual.

A software or hardware device used to monitor host or network events.

A method for a person to authenticate their identity by presenting a unique physical attribute.

A control model where access to all objects is centrally managed.

After identification and authentication, this is what a subject must have to access resources.

The objects of this directory are not actually stored in its directory; they point to the data.

This IPS monitors such things as the system state, system calls, and audit logs on a host.

This error takes place when a biometric system rejects an authorized individual.