Cdc 3D052 Vol1 Unit2 Review

Front 1

what is a measure used to verify the eligibility of a subject and the ability of the subject to access certain info?

Back 1

authentication

Front 2

what are 3 primary ways to authenticate ones self?

Back 2

something you know, are, have.

Front 3

knowledge based identification and authentication methods require the user to provide something you?

Back 3

know

Front 4

the AF requires a network password to be atleast how many characters long?

Back 4

9

Front 5

what regulation covers remanence security?

Back 5

AFSSI 8580

Front 6

storage media that retains data after power is removed is considered?

Back 6

sensitive

Front 7

which standard form is used to annotate storage media has been sanitized?

Back 7

711

Front 8

who can declassify storage media that has been sanitized?

Back 8

Infomation Owner

Front 9

what is the process of physically damaging the media to render is unusable in a computer and render the data on the media irretrievable by any known exploitation methods?

Back 9

destroying

Front 10

what is the process of erasing magnetic media by reducing the magnetic flux to virtual zero by applying a reverse magnetizing field?

Back 10

Degaussing

Front 11

what is the preferred method of sanitizing magnetic media?

Back 11

Degaussing

Front 12

what is a comprehensive evaluation and validation of an air force info system to establish the degree to which it complies with assigned info assurance controls based on standardized procedures?

Back 12

Certification

Front 13

what is a formal declaration by a designated approving official (DAA) that an info system is approved to operate in a particular security mode using a prescribed set of safeguards at an acceptable level of risk?

Back 13

Accredidation

Front 14

what is the DOD process for certifying and accrediting info systems to operate on the global info grid (GIG)?

Back 14

Department of Defense Information Assurance Certification and Accreditation Process (DIACAP)

Front 15

what documentation is required to permanently connect to the global info grid system?

Back 15

Authorization to Operate (ATO)

Front 16

what doc signifies that a system is not allowed to connect to the global info grid?

Back 16

Denial of Authorization to Operate (DATO)

Front 17

what process, along with AFI 33-210, air force certification and accredidation (C&A) program (AFCAP), provides the basic framework of the certification and accredidation?

Back 17

Information Technology (IT) lean reengineering

Front 18

what do you call the consolidated list of requirements that a program office must adhere to when fielding a system?

Back 18

department of defense info technology system cert and accreditation process (DITSCAP)

Front 19

what is the database of record for registering all systems and applications?

Back 19

DITSCAP

Front 20

what is a collection of computing environments connected by one or more internal networks under the control of a single approval authority and security policy?

Back 20

Enclave

Front 21

how many non-secure internet protocol router network (NIPRNET) gateways does the af possess?

Back 21

16

Front 22

which agency must approve all info protection tools prior to their use?

Back 22

HQ USAF

Front 23

what device is placed outside the boundary protection mechanism to monitor all attempted attacks?

Back 23

Intrusion Detection System (IDS)

Front 24

what are examples of network attacks that bypass the firewall?

Back 24

Tunneling and application based attacks

Front 25

what is the intrusion practice of encapsulating a message that would be rejected by the firewall inside a second message that will pass through the firewall?

Back 25

Tunneling

Front 26

a base web server that inferfaces with the public must be placed in what area of a base network?

Back 26

DMZ

Front 27

what is the simplest and least expensive way to stop an inappropriate netowork address?

Back 27

packet filtering

Front 28

what type of firewall consists of a screening router and a set of rules that accept or reject a message based on information int he messages header (a packet): the source address, the destination, and the port?

Back 28

Packet Filtering

Front 29

what type of firewall is used to separate secure sites, networks, or network segments from less secure areas?

Back 29

Bastion Host

Front 30

what type of firewall generates audit trails of all network related activity for monitoring and intrusion detection purposes?

Back 30

Bastion Host

Front 31

what network dvice performs regorous examinations of systems to identify weaknesses that might allow security violations?

Back 31

Vulnerability Scanners

Front 32

what action represents one of the greatest vulnerabilities to internal networks?

Back 32

network connected computer systems with modems that make calls to accept calls from the public switched network

Front 33

what do you call a current and percieved capability, intention, or attack, directed to cause denial of service?

Back 33

threat

Front 34

an ainformation system on your network that is not to require the use of a common access card or password would be considered a?

Back 34

vulnerability

Front 35

a program that replicates by attaching itself to a program is a?

Back 35

virus

Front 36

what type of malicious logic can form large networks that can be used to launch a varitety of attacks without an info systems owners knowledge?

Back 36

bot

Front 37

what type of malicious logic can become active on an information system without the need to infect a file?

Back 37

worm

Front 38

what is a cryptographic key and certificate delivery system that makes possible secure electronic transactions and exchanges of sensitive information between relative strangers?

Back 38

Public Key Infrastructure (PKI)

Front 39

what is an electronic document that officially links together a user's identity with his public key?

Back 39

PKI certificate

Front 40

what is a file that is kept with you and will allow you to decrypt files encrypted specifically for you using your openly available encryption code?

Back 40

private key

Front 41

what is an electronic document that officially links together a users identity with his public key?

Back 41

PKI certificate

Front 42

Which component of the PKI responsible for establishing, authenticating, maintaining, and revoking certificates?

Back 42

certificate authority

Front 43

the 2 ways key establishment can occur are key?

Back 43

transfer and aggreement

Front 44

which public key algorithm is exclusively a key establishment protocol?

Back 44

diffie and hellman

Front 45

what is the primary unclassified PKI token for individual PKI keys and certificates in the air force?

Back 45

CAC

Front 46

which team provides a communication link between forces securing the area and setting up support facilities?

Back 46

initial communications support teams

Front 47

sustained communications support becomes a part of the deployment if it exceeds how many days?

Back 47

30 days

Front 48

who provides uninterrupted flow of mission critical information to field and in-garrison units for the duration of a contigency?

Back 48

sustained communications support teams

Front 49

what program is known as a state of the are ground to ground communications infrastructure designed to provide base level full spectrum communications to the commander and all agencies on base?

Back 49

Theater Deployable Communications (TDC)