1What is a method for confirming users' identities? (ex: User login form)
Authentication
2What is the process of providing a user with permission including access levels and abilities such as file access
hours of access
3What are the 3 categories of Authentication and Authorization?
1. Something the user knows (e.g.
4What is a string of alphanumeric characters used to authenticate a user and provide access to a system?
Password
5What are the 3 areas of Information Security?
1. People (Authentication and Authorization) 2. Data (Prevention and Resistance) 3. Attacks (Detection and Response)
6What are small electronic devices that change user passwords automatically?
Tokens
7What is a device about the size of a credit card
containing embedded technologies that can store information and small amounts of software to perform some limited processing?
8What is the identification of a user based on a physical characteristic
such as a fingerprint
9What occurs when organizations use software that filters content
such as emails
10What is phishing?
A technique to gain personal information for the purpose of identity theft
11What is pharming?
Rerouting requests for legitimate websites to false websites (e.g.
12What scrambles information into an alternative form that requires a key or password to decrypt?
Encryption
13What uses two keys: a public key that everyone can have and a private key for only the recipient?
Public key encryption
14What is hardware and/or software that guards a private network by analyzing incoming and outgoing information for the correct markings?
Firewall
15What features full-time monitoring tools that search for patterns in network traffic to identify intruders?
Intrusion detection software
16What is an Intrusion Prevention System?
A network security appliance that monitors network and system activities to detect possible intrusions and takes action to prevent them.
17What is discretionary access control?
Access control where the owner determines who has access to the data and what privileges they have (user-centric).
18What is mandatory access control?
Access control that requires the system itself to manage access controls in accordance with the organization's security policies.
19What is rule-based access control?
An access control model based on a list of predefined rules that determine what accesses should be granted.
20What is role-based access control?
Ensures that the user gains access only to the resources that the user should be able to access.
21What is non-repudiation?
A mechanism to ensure that individuals cannot deny their actions.