Security Plus Chapter 10

Front 1

What is happening when a user types their name on the screen?

Back 1

This is the identification part of authentication.

Front 2

From a security perspective both the ______ and __________ should be identified?

Back 2

Both the User and Server are identified and it is called Mutual Authentication.

Front 3

What are the five Factors that can be used to authenticate an individual?

Back 3

1. Something you know: password or PIN
   
2. Something you have: swipe card or token
   
3. Something you are: biometrics (strongest)
   
4. Somewhere you are: GPS or IP
   
5. Something you do: typing pattern
   

Front 4

Explain the three multi-factor methods of Authentication.

Back 4

1. Single-Factor: User name and password
   
2. Two-Factor: Smart-card and PIN, fingerprint and password.
   
3. Three-Factor: Retina scan, swipe card and a PIN.
   

Front 5

How are multifactor Authentication schemes determined?

Back 5

Then number of authentication factors used i.e. something you know/do/are/have or somewhere you are.

Front 6

Single Sign-On SSO is the concept of using _________

to access multiple systems?

Back 6

A single sign-on to access multiple systems.

Front 7

The drawbacks of SSO are?

Back 7

Hack one hack all.

Front 8

What are Access Tokens?

Back 8

A soft i.e. (logical) token created when a user logs in that has the following:

1. Security identifier SID: assigned to users
   
2. Group Security identifiers
3. Primary Security identifiers: (POSIX Domain users not used in Windows)
   
4. Access Rights: created at logon only
   

Front 9

You have added a user to a new group, but they do not have any access rights. What is the most likely cause of the problem.

Back 9

The new user probably needs to log off and log on again to obtain an access token for the qroup.

Front 10

Name four Authentication Protocols used in Windows?

Back 10

1. Anonymous: no log on required an account for the service.
2. Basic: Require a log on which is sent to server in clear text.
3. Integrated Windows: same is Basic but encrypted
4. Kerberos: Mutual Authentication protocol uses KDC and sends tickets to clients for acess
   

Front 11

What are the Remote Access authentication RAS and VPN?

Back 11

1. RAS uses point-to-point connections (PPP) used by telephony application (for dial-up) to connect to the RAS server.
2. VPN connects to the remote VPN server using a secure channel over a trusted network both support PAP and CHAP.
   

Front 12

What is the PAP authentication protocols?

Back 12

1. Password Authentication is a basic authentication and is very insecure.

Front 13

What are three steps of the Challenge Handshake (CHAP) authentication protocol?

Back 13

1. The Server sends a challenge key
2. The client combines the challenge with the password and both are ran through the MD5 that creates hash value used by the server for authentication.
3. The server uses the key to create a hash value with the stored password which is compared to the client hash value thereby validating the password.

Front 14

What is the MS-CHAP authentication protocols?

Back 14

A variation of CHAP protocol that uses MD4 versus MD5 along with Microsoft Point-to-Point Encryption (MPPE) to encrypt all traffic from the client to the server.

Front 15

What is the MS-CHAPv2 authentication protocols?

Back 15

A variation of MS-CHAP that authenticates both the client and the server using stronger encryption keys

Front 16

What is the (EAP) Extensible authentication protocols?

Back 16

It allows for multiple logon methods such as smartcard logon, certificates Kerberos and public-key authentication it is also used with RADIUS.

Front 17

RADIUS is a central authentication service that can be used with which other protocols? One drawback of RADIUS is?

Back 17

This central authentication can be used with RAS, wireless or VPN solutions. It encrypts only the password.

Front 18

What are three aspects of the Authentication Services (AAA)?

Back 18

1. Authentication = verification
2. Authorization = network access
3. Accounting = logging activities for billing
   

Front 19

Name three AAA services?

Back 19

1. RADIUS: TCP based Remote Access Dial-In User Service
2. Diameter: designed to replace RADIUS it is more reliable, secure and scalable.
3. TACACS & XTACACS Terminal Access Controller Access Control System improvement over RADIUS because it encrypts all send info

Front 20

Radius uses which transport layer protocol and which ports?

Back 20

1. UDP is the protocol and the ports are 1812 and 1813.
   

Front 21

Name two Authentication protocols that use applications to authenticate to a directory and then to retrieve information about objects in the directory?

Back 21

Lightweight Directory Addess Protocol (LDAP)

LDAP (uses TCP port 389) and secure LDAP (uses TCP port 636) and is encrypted

Front 22

Name two Authentication protocols that generate passwords? How are they different?

Back 22

Time-based One Time Password (TOTP) generated based on Current Time while and HOTP is based on the Hash Message Authentication Code HMAC-based involves the use of a hashing code.

Front 23

Which Authentication protocol is an XML standard designed for authentication and authorization often used with identity federation.

Back 23

SAML Security Assertion Markup Language.

Front 24

What is Federation Authentication protocol?

Back 24

A term used to authenticate and authorize users across organizations and application boundaries through the use of an Identity Management system.

Note: In FID, a user's credentials are always stored with the "home" organization (the "identity provider")

Front 25

Which two Authentication protocols are based on trust.

Back 25

1. Trusted OS uses multiple security layers i.e. authentication and authorization.
2. Transitive trust access is based on a trust model i.e. Computer A trust Computer B ...
   

Front 26

Implicit Deny Authentication protocol is based on

Back 26

Denying anyone access to a system until they are authenticated.

Front 27

What is the most common form of authentication?

Back 27

Unique user name and password.

Front 28

What is the difference between authentication and identification?

Back 28

Identification is presenting documents to show identify and authentication is proving your identity by knowing a password.

Front 29

What are the three major token types?

Back 29

1. Hardware token
2. Software token i.e. app
3. Logical tokens generated at log on containing a SID and a list of privileges.
   

Front 30

What is the most secure Biometric authentication?

Back 30

Iris scan which scans the colored part of the eye.

Front 31

What does the Retina scan do?

Back 31

Scans the pattern of blood vessels around the retins

Front 32

Name types of Biometric Errors?

Back 32

1. Type I false reject rare (FRR)
2. Type II false aceptance (FAR)
   

Front 33

What is the crossover error rate (CER)

Back 33

Measurement of the accuracy of a biometric device.

Front 34

What are two types of smart cards?

Back 34

1. CAC common access card is and identity card use with a PIN
2. PIV personal identification verification card is used to store information about personnel i.e. authentication and biometrics
   

Front 35

When using a VPN to connect to a RADIUS server the VPN is called the?

Back 35

RADIUS client.