Security Fundamentals 98-367: Lesson 2: Términos de La Unidad

29/3/2021 Fichas de aprendizaje Security Fundamentals 98-367: Lesson 2 | Quizlet
Security Fundamentals 98-367: Lesson 2
Con Quizlet Plus, obtén acceso a todas las estadísticas, al panel de avance personal y a atajos de estudio inteligentes.
Suscríbete
Términos de la unidad (79)
Which of the following is not a method for

authentication?
-Something the user knows
Encryption
-Something the user owns or possesses
-Encryption
-Something the user is
Which of the following is not a biometric device?

-Password reader
Password reader -Retinal scanner
-Fingerprint scanner
-Face scanner
Which of the following services is used for

centralized authentication, authorization, and
accounting?
RADIUS -VPN
-PGP
-RADIUS
-PKI
What is the primary authentication method used

Kerberos
on Microsoft Active Directory?
https://quizlet.com/42853129/security-fundamentals-98-367-lesson-2-flash-cards/ 1/10
The master time keeper and master for password

PDC Emulator
changes in an Active Directory domain is:
SAM Local user accounts are found in:
A(n) _____ authorizes a user to perform certain

right
actions on a computer.
Which of the following file systems offers the best

security?
-FAT
NTFS
-FAT32
-NTFS
-EFS
Which NTFS permission is needed to change

Full Control
attributes and permissions?
Which type of permission is granted directly to a

Explicit
file or folder?
The same permissions as the If you copy a file or folder to a new volume, what
target folder permissions will that file or folder have?
Which of the following uses an ACL?

NTFS folder -NTFS folder
Active Directory user -Active Directory user
Registry key -Registry key
-Login rights
Which type of key has one key for encryption and

Asymmetric
a different key for decryption?
Which infrastructure is used to assign and validate

PKI
digital certificates?
Which technology is used to encrypt an individual

EFS
file on an NTFS volume?
A device that may give you a second password to

security token
log in to a system is a(n) _____.
The _____ holds a copy of the centralized database

domain controller
used in Active Directory
By default, your computer clock should not be off

five more than ____ minutes or you might have
problems with Kerberos authentication.
A(n) _____ defines the type of access over an object

permission or the properties of an object such as an NTFS file
or printer.
_____ permissions flow from a parent object to a

Inherited
child object.
When you cannot access a folder because

ownership someone removed the permissions so that no one
can access it, you must take _____ of the folder.
The centralized database that holds most of the

registry
Windows configuration is known as the _____.
To track a user's activities in Windows, you need to

auditing
enable _____.
A list of all users and groups that have access to

access control list (ACL)
an object.
Also known as auditing, is the process of keeping

track of a user's activity while accessing network
resources, including the amount of time spent in
accounting
the network, the services accessed while there,
and the amount of data transferred during each
session.
A directory service technology created by

Microsoft that provides a variety of network
services, including Lightweight Directory Access
Protocol (LDAP), Kerberos-based and single sign-
Active Directory
on (SSO) authentication, DNS-based naming and
other network information and a central location
for network administration and delegation of
authority.
A shared folder typically used for administrative

administrative share
purposes.
Also known as public key cryptography, uses two

mathematically related keys for encryption. One
asymmetric encryption
key is used to encrypt the data, while the second
is used to decrypt it.
Also known as accounting, is the process of

keeping track of a user's activity while accessing
network resources, including the amount of time
auditing
spent in the network, the services accessed while
there, and the amount of data transferred during
each session.
The process of identifying an individual, usually

authentication
based on a username and a password.
The process of giving individuals access to system

authorization
objects based on their identity.
An authentication method that identifies and

recognizes people based on physical traits, such
biometrics
as fingerprints, face recognition, iris recognition,
retinal scans, and voice recognition.
A new feature in Windows 7 that enables users to

BitLocker To Go encrypt removable USB devices, such as flash
drives and external hard disks.
A type of attack that tries as many possible

brute force attack combinations of characters as time and money
permits.
The default groups that are included within

built-in groups
Windows or Active Directory
Also known as the certification path, is a list of

certificates used to authenticate an entity. It
certificate chain
begins with the certificate of the entity and ends
with the root CA certificate.
A list of certificates (or more specifically, a list of

certificate revocation list serial number for certificates) that have been
(CRL) revoked or are no longer valid and therefore
should not be relied on.
A logical object that provides a means for

authentication and auditing a computer's access
computer account
to a Windows network, as well as its access to
domain resources.
The process of converting data from encrypted

decryption
format back to its original form.
A form of attack which attempts all words in one

dictionary attack or more dictionaries. Lists of common passwords
are also typically tested.
An electronic document that contains an identity,

such as a user or organization name, along with a
digital certificate corresponding public key. Because a _____ is used
to prove a person's identity, it can also be used for
authentication.
A mathematical scheme that is used to

demonstrate the authenticity of a digital message
digital signature
or document. It is also used to prove that the
message or document has not been modified.
A Windows server that stores a replica of the

domain controller account and security information of a domain and
defines the domain boundaries.
A user account stored on the domain controller

and allows you to gain access to resources within
domain user
the domain, assuming you have been granted
permissions to access those objects.
Actual permissions when logging in and accessing

effective permission a file or folder. They consist of explicit permissions
plus any inherited permissions
The process of converting data into a format that

cannot be read by another user. Once a user has
encryption
______ a file, that file automatically remains _____
when it is stored on disk.
explicit permission Permissions granted directly to a file or folder
A collection or list of user accounts or computer

group
accounts
Has a one-way encryption, which means that after

hash function something has been encrypted with this method,
it cannot be decrypted.
Permissions granted to a folder (parent object or

inherited permission container) that flows into child objects (subfolders
or files) inside that folder.
A suite of protocols that provides a mechanism for

data integrity, authentication, and privacy for the
Internet Protocol. It is used to protect data that is
sent between hosts on a network by creating
IP Security (IPsec)
secure electronic tunnels between two machines
or devices. ____ can be used for remote access,
VPN, server connections, LAN connections, or
WAN connections.
The default domain computer network

authentication protocol, which allows hosts to
Kerberos
prove their identity over a non-secure network in
a secure manner.
Can be thought of as a password, is applied

mathematically to plain text to provide cipher or
Key
encrypted text. Different _____ produce different
encrypted output.
A user account that is stored in the Security

local user account Account Manager (SAM) database on the local
computer.
member server A server that is not running as a domain controller
When two or more authentication methods are

multifactor authentication
used to authenticate someone.
Prevents one party from denying the actions it has

nonrepudiation
carried out.
The preferred file system for today's Windows

NTFS
operating system
Permissions that allow you to control which users

NTFS Permission and groups can gain access to files and folders on
an NTFS volume
The default authentication protocol for Windows

NT, stand-alone computers that are not part of a
NTLM
domain, and situations in which you are
authenticating to a server using an IP address.
A container used in Active Directory to help

organizational units (OU) organize objects within a domain and minimize the
number of domains
An identity that controls an object including what

owner permissions are set on the object and to whom
permissions are granted.
A secret series of characters that enables a user to

password
access a particular file, computer, or program
Defines the type of access that is granted to an

permission object (an object can be identified with a security
identifier) or object attribute
A secret numeric password shared between a

personal identification
user and a system that can be used to
number (PIN)
authenticate the user to the system.
A system consisting of hardware, software,

policies, and procedures that create, manage,
distribute, use, store, and revoke digital
public key infrastructure (PKI) certificates. Within the ____, the certificate authority
(CA) binds a public key with respective user
identities and issues digital certificates containing
the public key.
A central, secure database in which Windows

stores all hardware configuration information,
software configuration information, and system
registry
security policies. Components that use the ____
include the Windows kernel, device drivers, setup
programs, hardware profiles, and user profiles.
Authorizes a user to perform certain actions on a

computer, such as logging on to a system
right interactively or backing up files and directories on
a system. User _____ are assigned through local
policies or Active Directory group policies.
A cryptographic system that uses two keys to

encrypt data, a public key known to everyone and
a private key known only to the recipient of the
Secure Sockets Layer (SSL)
message. The public key is published in a digital
certificate, which also confirms the identity of the
web server.
Security Account Manager A local security database found on most Windows

(SAM) computers.
A physical device that an authorized computer

security token
services user is given to ease authentication.
share permissions permissions assigned to shared folders or drives
Technology that allows access of data files over

shared folder
the network.
Technology that allows you to log on once and

single sign-on (SSO) access multiple related but independent software
systems without having to log in again.
A pocket-sized card with embedded integrated

circuits consisting of nonvolatile memory storage
smart card
components and perhaps dedicated security
logic.
symmetric encryption Uses a single key to encrypt and decrypt data.
A standard for logging program messages that

Syslog can be accessed by devices that would not
otherwise have a method for communications.
A logical object that enables a user to log on to a

user account
computer and domain.
Technology that links two computers through a

wide-area network such as the Internet. To keep
virtual private network (VPN)
the connection secure, the data sent between the
two computers is encapsulated and encrypted.

Security Fundamentals 98-367: Lesson 2: Términos de La Unidad

Uploaded by

Document Information

Original Description:

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Security Fundamentals 98-367: Lesson 2: Términos de La Unidad

Uploaded by

Copyright:

Available Formats

29/3/2021 Fichas de aprendizaje Security Fundamentals 98-367: Lesson 2 | Quizlet

Security Fundamentals 98-367: Lesson 2

Términos de la unidad (79)

Which of the following is not a method for

Which of the following is not a biometric device?

Which of the following services is used for

What is the primary authentication method used

The master time keeper and master for password

SAM Local user accounts are found in:

A(n) _____ authorizes a user to perform certain

Which of the following file systems offers the best

Which NTFS permission is needed to change

Which type of permission is granted directly to a

Which of the following uses an ACL?

Which type of key has one key for encryption and

Which infrastructure is used to assign and validate

Which technology is used to encrypt an individual

A device that may give you a second password to

The _____ holds a copy of the centralized database

By default, your computer clock should not be off

A(n) _____ defines the type of access over an object

_____ permissions flow from a parent object to a

When you cannot access a folder because

The centralized database that holds most of the

To track a user's activities in Windows, you need to

A list of all users and groups that have access to

Also known as auditing, is the process of keeping

A directory service technology created by

A shared folder typically used for administrative

Also known as public key cryptography, uses two

Also known as accounting, is the process of

The process of identifying an individual, usually

The process of giving individuals access to system

An authentication method that identifies and

A new feature in Windows 7 that enables users to

A type of attack that tries as many possible

The default groups that are included within

Also known as the certification path, is a list of

A list of certificates (or more specifically, a list of

A logical object that provides a means for

The process of converting data from encrypted

A form of attack which attempts all words in one

An electronic document that contains an identity,

A mathematical scheme that is used to

A Windows server that stores a replica of the

A user account stored on the domain controller

Actual permissions when logging in and accessing

The process of converting data into a format that

explicit permission Permissions granted directly to a file or folder

A collection or list of user accounts or computer

Has a one-way encryption, which means that after

Permissions granted to a folder (parent object or

A suite of protocols that provides a mechanism for

The default domain computer network

Can be thought of as a password, is applied

A user account that is stored in the Security

member server A server that is not running as a domain controller

When two or more authentication methods are

Prevents one party from denying the actions it has

The preferred file system for today's Windows

Permissions that allow you to control which users

The default authentication protocol for Windows