70-646 Ch 13 Terms

Front 1

802.1X

Back 1

A wireless and wired port-based authentication standard offered by the IEEE.

Front 2

Active Directory Rights Management Services (AD RMS)

Back 2

A server role that works with client
applications that can take advantage of RMS safeguards. See Rights Management Services (RMS).

Front 3

Advanced Encryption Standard (AES)

Back 3

A relatively new standard adopted by the U.S.
government to replace DES and 3DES, and that employs a private-key block-cipher form of
encryption.

Front 4

assigning applications (or software)

Back 4

Means an application is automatically represented on
the user’s desktop, for example as a Start menu option or as an icon on the desktop, and which
initially is really a link to a central application distribution server. The fi rst time the user tries
to open the application is the point at which it is fully installed from the distribution server and
can be used from that point on.

Front 5

BitLocker Drive Encryption

Back 5

A security measure for protecting hard drives in Windows Vista/7
Enterprise and Ultimate as well as Windows Server 2008. It can use a TPM chip on a computer
or a fl ash drive with a PIN to enforce security. See Trusted Platform Module (TPM).

Front 6

demilitarized zone (DMZ)

Back 6

A portion of a network that is relatively less secure because it is
between two networks, such as between a private network and the Internet.

Front 7

group policy

Back 7

A set of policies that govern security, confi guration, and a wide range of other
settings for objects within containers in Active Directory.

Front 8

group policy object (GPO)

Back 8

An object in Active Directory that contains group policy settings
for a site, domain, OU, or local computer.

Front 9

Health Registration Authority (HRA)

Back 9

A server that network clients contact to provide their
Statement of Health (SoH). On the basis of the SoH, the HRA server grants a certifi cate to
enable the client to use network services. See Statement of Health (SoH).

Front 10

inherited rights

Back 10

User rights that are assigned to a group and that automatically apply to all members of that group.

Front 11

IP Security (IPsec)

Back 11

A set of IP-based secure communications and encryption standards created
through the Internet Engineering Task Force (IETF).

Front 12

Kerberos

Back 12

A security system developed by the Massachusetts Institute of Technology to enable
two parties on an open network to communicate without interception from an intruder, by
creating a unique encryption key for each communication session.

Front 13

publishing applications (or software)

Back 13

Involves setting up software through a group policy so
that the application is available for users to install from a central distribution server, such as
through the Add/Remove Programs capability via the user’s desktop.

Front 14

remediation server

Back 14

A server that can issue updates and security policy changes to a client
computer to bring that client into Network Access Protection (NAP) compliance.

Front 15

Resultant Set of Policy (RSoP)

Back 15

A Windows Server 2008 tool that enables you to produce
reports about proposed or current group policy settings for the purpose of planning and
troubleshooting when multiple group policies are in use (such as for OUs and domains).

Front 16

Rights Management Services (RMS)

Back 16

Security rights developed by Microsoft to provide
security for documents, spreadsheets, e-mail, and other types of fi les created by applications.

Front 17

RSA

Back 17

Developed by Rivest, Shamir, and Adleman, an encryption technique that uses public and
private keys along with a computer algorithm that relies on factoring large prime numbers.

Front 18

service ticket

Back 18

In Kerberos security, a permanent ticket good for the duration of a logon session
(or for another period of time specifi ed by the server administrator in the account policies) that
enables the computer to access network services beginning with the Logon service.

Front 19

Statement of Health (SoH)

Back 19

Information that a client provides to a Health Registration
Authority (HRA) to enable it to gain access to network services. The information includes
security policy and recent update verifi cation. This is part of Microsoft’s Network Access
Protection (NAP) capabilities. See Health Registration Authority (HRA).

Front 20

Trusted Platform Module (TPM)

Back 20

A security specifi cation for a hardware device used to secure
information on another device, such as on a hard drive. The TPM hardware device is typically
a chip.

Front 21

User Account Control (UAC)

Back 21

Enables software and device installations in standard user mode
while still ensuring authorization from the administrator. UAC is intended to further remove
these activities from access to the kernel to protect the operating system and make it diffi cult to
destabilize through malware and intrusions.

Front 22

Windows NT LAN Manager version 2 (NTLMv2)

Back 22

An authentication protocol used in legacy
Windows NT Server systems and retained in all Windows systems for backward compatibility
for clients that cannot support Kerberos.