sec160 ch 8 netacad q11

accounting

Which component of AAA allows an administrator to track individuals who access network resources and any changes that are made to those resources?

authorization

Which component of AAA is used to determine which resources a user can access and which operations the user is allowed to perform?

availability

info is always available to those who are authorized to access it.

confidentiality

info is only accessible to authorized individuals

integrity

info is protected from unauthorized alternation.

Department of Homeland Security

Which of the following offers a free service called Automated Indicator that enables the real-time exchange of cyberthreat indicators?

discretionary access control

it allows users to control access to their data as owners of that data. It may use ACLs or other methods to specify which users or groups of users have access to the info.

Identify the characteristics of AAA

-Authentication -Authorization -Accounting

Identify the Threat Intelligence Info Source

-FireEye -CVE -Talos -AIS

accounting and auditing

AAA component that records and logs user activity.

authentication

AAA component that requires proof of identity

authorization

AAA component that specifies the resources a user can access.

immediately after successful authentication against an AAA data source.

During the AAA process, when will authorization be implemented?

T/F. Local AAA authentication requires a central AAA server

False

T/F. RADIUS encrypts both passwords and the contents of packets.

False

authentication

Passwords, passphrases, and PINs are examples of which security term?

remote access

Refer to the exhibit. The security policy of an org allows employees to connect to the office intranet from their homes. Which type of security policy is this?

T/F. The mandatory access control (MAC) model limits access based on the security level clearance of an individual.

True

-the use of UDP ports for authentication and accounting -encryption of the authentication and authorization processes

What are two characteristics of the RADIUS protocol? (Choose two)

One safeguard failure does not affect the effectiveness of other safeguards.

What is a characteristic of a layered defense-in-depth security approach?

Vulnerabilities in systems are exploited to grant higher levels of privilege than someone or some process should have.

What is privilege escalation?

company policy

Which type of business policy establishes the rules of conduct and the responsibilities of employees and employers?

defense-in-depth

a security approach that uses multiple layers of security.

security policies

a set of security objectives for an org.

vulnerability

a weakness in a system that can be exploited

non-discretionary access control

access decisions are based on the roles and responsibilities of the individual within the org.

attribute-based access control

allows access based on attributes of the object (resource) to be accessed, the subject (user) accessing the resource, and the environment factors regarding how the object is to be accessed, such as time of day.

thread

any potential danger to an asset.

Mandatory Access Control (MAC)

apply the strictest access control and is typically used in military or mission-critical applications. It assigns security level labels to info and enables users with access based on their security level clearance.

A company has a file server that shares a folder named Public. The network security policy specifies that the Public folder is assigned Read-Only rights to anyone who can log into the server while the Edit rights are assigned only to the network admin group. Which component is addressed in the AAA network service framework?

authorization

BYOD

enables employees to use their own mobile devices to access company systems.

business policies

guidelines that govern the actions of an org.

Acceptable Use Policy (AUP)

identifies network applications and uses that are acceptable to the org.

company policies

rules of conduct and responsibilities for employers and employees

principle of least privilege

specifies an as-needed approach to user access rights.

edge router

the first line of defense that passes all inbound connections to the firewall.

artichoke

with the evolution of borderless networks, which vegetable is now used to describe a defense-in-depth approach?