Cissp - Access Control

Front 1

What are 7 access control categories?

Back 1

Directive - Administrative controls. Controls designed to specify acceptable rules of behavior within an org
Deterrent - controls designed to discourage people from violating security directives
Preventive - prevent incident or breach
Compensating - controls to substitute for the loss of primary controls
Detective - to signal a warning
Corrective - to remedy circumstance, mitigate damage, restore controls
Recovery - to restore conditions to normal

Front 2

What is strong authentication?

Back 2

AKA two factor authentication is two out of three: something person knows, has or is

Front 3

A series of computer networking standards covering electronic directory services such as LDAP.

Back 3

X.500

Front 4

An application protocol for querying and modifying data of directory services implemented in Internet Protocol (IP) networks.

Back 4

LDAP

Front 5

Main gate between users and corporate web based resources. Commonly a plug-in for web server

Back 5

WAM - Web Access Management

Front 6

In Biometrics, what is a Type 1 error?

Back 6

False rejection - rejects authorized individual

Front 7

In Biometrics, what is a Type 2 error?

Back 7

False acceptance - accepts imposture

Front 8

Syncs with authentication service by using time or a counter

Back 8

Synchronous token devices

Front 9

A type of token which uses challenge/response. Auth server sends user a challenge (nonce) which is random value. The user enters the random value into token device which encrypts it and sends it back to auth server. Returns a one time password

Back 9

Asynchronous token

Front 10

What is a security domain?

Back 10

Resources in a logical structure working under same security policy and managed by same group

Front 11

Authentication protocol that uses a KDC and tickets and is based on symmetric key cryptography

Back 11

Kerberos

Front 12

Authentication protocols that uses PAS and PACs and is based on symmetric and asymmetric cryptography

Back 12

SESAME

Front 13

Type of access control based on assignment of permissions to read, write, execute. Require an administrator to assign rights

Back 13

Nondescretionary access control

Front 14

Type of access control in which access to objects is determined by content of the object

Back 14

Content dependent access control

Front 15

Type of access control which makes access decisions based on context of the collection of information rather than the sensitivity

Back 15

Context dependent access control

Front 16

Type of intrusion detection also known as misuse detection. Pattern matching similar to antivirus software

Back 16

Signature based intrusion detection

Front 17

Behavior based or heuristic intrusion detection

Back 17

Anomaly based intrusion detection

Front 18

Name 3 kinds of Anomaly based intrustion detection

Back 18

Statistical anomaly based - creates profile of normal and compares activities to profile

Protocol anomaly based - Identifies protocols used outside of their common bounds

Traffic anomaly based - Identifies unusual activities in network traffic

Front 19

Type of intrusion detection that uses if then rule based programming within expert systems

Back 19

Rule based intrusion detection

Front 20

Type of intrusion detection that uses network interface card (NIC) in promiscuous mode. Reviews packets and headers

Back 20

Network based intrusion detection (NIDS)

Front 21

Type of intrusion detection that can be installed on workstations or servers. Does not monitor traffic or user activity

Back 21

Host based intrusion detection (HIDS)

Front 22

Penetration testing done by group with knowledge of organization. Can be done frequently and less expensively.

Back 22

Blue Team

Front 23

Penetration testing done by external group in stealth mode

Back 23

Red Team

Front 24

Ethical hacker not knowing what to look for

Back 24

Black Box

Front 25

Ethical hacker knows what to look for

Back 25

White Box