MyCISSP
Terms
undefined, object
copy deck
- Operational Security
-
- Protection and control of enterprise assets and operations
- Keep other services running
- Continual maintenance - Security Operations
-
- Tasks to keep security services running
- Service of it's own
- Support availability, integrity and confidentiality - Incident Response Steps
-
- Detection
- Response
- Reporting
- Recovery
- Remediation
- Review
- Personnel Security
-
- Need to know
- Least privilege
- Separation of duties
- Job rotation
- Monitor privileges
-
Access Control Category
BEFORE AN EVENT -
DIRECTIVE specifices requirements or actions based on policy or regulations
PREFE
3-6 - Define: IdM
- Identity Management - the technologies and process intended to offer greater efficiency in the management of a diverse user and technical environment.
- Define CER
- Where FAR equals FRR
- DEFINE FRR
- False Rejection Rate: failure to authenticate a user who should be authenticated
- DEINE Kerberos
-
3 headed dog protecting Hades
A Key Dist Center (KDC) hands of keys to client, allowing access to resource server.
Potential single-point of failure
- DEFINE: RADIUS
- Remote Authentication Dial-In User Service
- DEFINE: CHAP
-
Challenge Handshake Authentication Protocol
3way handshake - PENTESTING STEPS
-
Discovery
Enumeration
Vulnerability Mapping
Exploitation