Sra 221 Chapter 11

Front 1

_______________ is an authentication model designed around the concept of using tickets for accessing objects.

Back 1

Kerberos

Front 2

_______________ is designed around the type of tasks people perform.

Back 2

Role-based access control (RBAC)

Front 3

A formal manner of describing the necessary and sufficient portions of the IPsec protocol series to achieve a specific level of protection is a(n) _______________.

Back 3

Security Association (SA)

Front 4

_______________ describes a system where every resource has access rules set for it all of the time.

Back 4

Mandatory access control (MAC)

Front 5

A(n) _______________ is a collection of protocols used to secure network traffic over a nonsecure network.

Back 5

Virtual Private Network (VPN)

Front 6

In IPsec, a security association is defined by a specific combination of authentication header and _______________.

Back 6

Encapsulating Security Payload

Front 7

The protection of the data portion of a packet is _______________ protection.

Back 7

Content

Front 8

The protection of the header portion of a packet is _______________ protection.

Back 8

Context

Front 9

_______________ is a key management and exchange protocol used with IPsec.

Back 9

ISAKMP

Front 10

The process of comparing credentials to those established during the identification process is referred to as _______________.

Back 10

Authentication

Front 11

To establish a PPTP connection across a firewall, you must do which of the following?

Back 11

Open TCP port 1723

Front 12

On a VPN, traffic is encrypted and decrypted at:

Back 12

Endpoints of the tunnel only

Front 13

Secure Shell uses which port to communicate?

Back 13

TCP port 22

Front 14

Which of these protocols is used for carrying authentication, authorization, and accounting information between a network access server and a shared authentication server?

Back 14

RADIUS

Front 15

IPsec can provide which of the following types of protection?

Back 15

Both context and content protection

Front 16

Elements of Kerberos include which of the following?

Back 16

Ticket-granting ticket, authentication server, ticket

Front 17

What protocol is used for RADIUS?

Back 17

UDP

Front 18

Which protocols are natively supported by Microsoft Windows XP and Vista for use in securing remote connections? (more than one answer is allowed)

Back 18

PPTP, IPsec

Front 19

What are the foundational elements of an access control system?

Back 19

Identification, authorization, authentication

Front 20

A ticket-granting server is an important element in which of the following authentication models?

Back 20

Kerberos

Front 21

Authentication is typically based upon what?

Back 21

A) Something a user possesses
B) Something a user knows
C) Something measured on a user, such as a fingerprint

Front 22

Passwords are an example of

Back 22

Something you know

Front 23

IPsec provides which options as security services?

Back 23

ESP and AH

Front 24

To establish an L2TP connection across a firewall, you must do which of the following?

Back 24

Open UDP port 1701

Front 25

Which statement best describes differences between RADIUS and TACACS+?

Back 25

TACACS+ separates authentication, authorization, and accounting capabilities