Ais Exam 2 Chp 8

Front 1

Time based model of security

Back 1

Implementing a combination of preventive, detective, and corrective controls that protect information assets long enough to recognize that a certain attack is occurring and take steps to thwart it before any information is lost or compromised

Front 2

Defense in depth

Back 2

Employing multiple layers of controls to avoid a single point-of-failure

Front 3

Authentication

Back 3

Verifying the identity of the person or device attempting to access the system.

Front 4

Biometric identifier

Back 4

A physical or behaviorial characteristic that is used as an authentication credential

Front 5

Multifactor authentication

Back 5

The use of two or more types of authentication credentials in conjunction to achieve a greater level of security.

Front 6

Multimodal authentification

Back 6

The use of multiple authentication credentials of the same type to achieve a greater level of security.

Front 7

Authorization

Back 7

The process of restricting access of authenticated users to specific portions of the system and limiting what actions they are permitted to perform.

Front 8

Access control matrix

Back 8

A table used to implement authorization controls

Front 9

Compatibility test

Back 9

Matching the users authentication credentials against the access control matrix to determine whether that employee should be allowed to access that resource and perform the requested action.

Front 10

Penetration test

Back 10

An authorized attempt to break into the organizations information system.

Front 11

Change control and change management

Back 11

The formal process used to ensure that modifications to hardware, software, or processes do not reduce systems reliability.

Front 12

Border router

Back 12

A device that connects an organizations information system to the internet.

Front 13

Firewall

Back 13

A special purpose hardware device or software running a general-purpose computer that controls both inbound and outbound communication between the system behind the firewall and other networks.

Front 14

Demilitarized zone

Back 14

A seperate network located outside the organizations internal information system that permits controlled access from the internet.

Front 15

Routers

Back 15

Special purpose devices that are designed to read the source and destination address fields in IP packet headers to decide where to send the packet next.

Front 16

Access control list

Back 16

A set of IF-THEN rules used to determine what to do with arriving packets.

Front 17

Packet filtering

Back 17

A process that uses various fields in a packets IP and TCP headers to decide what to do with the packet.

Front 18

Deep pocket inspection

Back 18

A process that examines the data in the body of a TCP packet to control traffic, rather than looking only at the information in the IP and TCP headers.

Front 19

Intrusion prevention systems

Back 19

Software or hardware that monitors patterns in the traffic flow to identify and automatically block attacks.

Front 20

Endpoints

Back 20

Collective term for the workstations, servers, printers, and other devices that comprise an organizations network.

Front 21

Vulnerabilities

Back 21

Flaws in programs that can be exploited to either crash the system or take control of it.

Front 22

Vulnerability scanners

Back 22

Automated tools designed to identify whether a given system processes any unused and unnecessary programs that represent potential security threats.

Front 23

Exploit

Back 23

A program designed to take advantage of a known vulnerability.

Front 24

Patch

Back 24

Code released by software developers that fixes a particular vulnerability.

Front 25

Patch management

Back 25

The process of regularly applying patches and updates to software.

Front 26

Hardening

Back 26

The process of modifying the default configuration of endpoints to eliminate unnecessary settings and services.

Front 27

Log analysis

Back 27

The process of examining logs to identify evidence of possible attacks.

Front 28

Intrusion detection systems

Back 28

A system that creates logs of all network traffic that was permitted to pass the firewall and then analyzes those logs for signs of attempted or successful intrusions.

Front 29

Computer incident response team

Back 29

A team that is responsible for dealing with major security incidents.

Front 30

Virtualization

Back 30

Running multiple systems simultaneously on one physical computer.

Front 31

Cloud computing

Back 31

Using a browser to remotely access software, data storage, hardware, and applications.