CyberSecStudy - CISSP - Domain #5

A portable identity that enables users of one domain to access the data of another domain.

This component of SESAME holds a similar role to the KDC in Kerberos.

This access control model allows each user to control access to their own data.

When a hacker suspects that a hashing algorithm has been used on a password file.

An active entity that requests access to an object or the data within an object.

The creation of IP packets with a forged source IP address.

This is a method of bypassing normal authentication of a software application.

This directory contains data about data.

After identification and authentication, this is what a subject must have to access resources.

This allows you to login to one system and gain access to multiple systems and applications.

This error takes place when a biometric system accepts an unauthorized individual.

This component of Kerberos provides an authentication service.

A method for a person to authenticate their identity by presenting a unique physical attribute.

A control model where access to all objects is centrally managed.

This allows you to combine multiple directory services.

A passive entity that contains information.

What it’s called when a system uses two or more of the three authentication factors.

The process of recovering passwords from data stored in or transmitted by a computer system.

This scans the blood-vessel pattern on the backside of the eyeball.

A criteria or threshold at which certain activity should be flagged or trigger an alert.

This is a network attack where a transmission is intercepted and repeated or delayed.

The flow of information between a subject and an object.

This scans the colored portion of the eye that surrounds the pupil.

This type of IDS is not good at detecting new, unknown, or zero day vulnerabilities.

This web connection maintains a record of previous web searches and interactions.

Access control permissions assigned to a role or group and the user inherits those Attributes.

This error takes place when a biometric system rejects an authorized individual.

The objects of this directory are not actually stored in its directory; they point to the data.

Any type of wiring that transmits electric signals emits these waves.

This is what you use to manage the objects listed in a directory.

The point at which the false rejection rate and the false acceptance rate are equal.

This IDS/IPS monitors packets of information as they traverse the network from multiple systems

A software or hardware device used to monitor host or network events.

This IPS monitors such things as the system state, system calls, and audit logs on a host.

This computer based single sign-on authentication protocol provides a single sign-on capability

A method for allowing a subject to prove its identity.

The electronic representation of a real-world entity.

This component of Kerberos allows one principal to authenticate to another principal.

Access control permissions assigned directly to a specific individual.

This IDS runs in discovery mode for a period of time before running in active mode.