1
Q
directory services
A
username and passwords are in single database
2
Q
federation
A
provide network access to others
partners, suppliers, customers
SSO
3
Q
TOTP
A
Time Based One Time Password
TOTP passwords are valid for a certain amount of time, called a timestep. Timesteps are usually 30 or 60 seconds long
4
Q
HOTP
A
HMAC One Time Password
renewed each time a user logs into their account
5
Q
FRR
A
False Rejection Rate
6
Q
AAA
A
authentication, authorization, accounting
a framework for controlling and tracking user access to a computer network
Sec+
flashcards
Decks in class (38)
# Cards
-
1.1 social engineering techniques4
-
1.2 analyze potential indicators to determine the type of attack7
-
1.3 potential indicators associated with application attacks19
-
1.4 potential indicators associated with network attacks.10
-
1.5 different threat actors, vectors, and intelligence sources9
-
1.6 security concerns associated with various types of vulnerabilities1
-
1.7 techniques used in security assessments5
-
1.8 techniques used in penetration testing7
-
2.1 security concepts in an enterprise environment5
-
2.2 virtualization and cloud computing concepts9
-
2.3 secure application development, deployment, and automation concepts7
-
2.4 authentication and authorization design concepts6
-
2.5 implement cybersecurity resilience10
-
2.6 embedded and specialized systems7
-
2.7 physical security controls3
-
2.8 cryptographic concepts23
-
2.8 Algorithms, Protocols, Encryptions21
-
2.8 Block Cipher Modes4
-
3.1 secure protocols PORTS19
-
3.2 host or application security solutions16
-
3.3 secure network designs22
-
3.4 install and configure wireless security settings9
-
3.5 secure mobile solutions6
-
3.6 cybersecurity solutions to the cloud7
-
3.7 identity and account management controls.2
-
3.8 implement authentication and authorization solutions14
-
3.9 public key infrastructure17
-
4.1 Organizational Security25
-
4.2 policies, processes, and procedures for incident response5
-
4.3 data sources to support an investigation7
-
4.4 apply mitigation techniques or controls to secure an environment5
-
4.5 key aspects of digital forensics7
-
5.1 types of controls9
-
5.2 applicable regulations, standards, or frameworks that impact organizational security posture.12
-
5.3 policies to organizational security7
-
5.4 Risk Analysis10
-
5.5 privacy and sensitive data concepts in relation to security5
-
Test Study26
