logo image

IST266 test 4

subnotebook
An ultrabook is an example of what type of a portable computer?
RS232
A laptop may have multiple hardware ports. Which of the following is not a typical port included on a laptop?
track stolen devices
Which of the following selections is not one of the features provided by a typical MDM?
google glass
Select below the option that represents a wearable technology:?
inventory control
What term is used to describe the operation of stockrooms where mobile devices are stored prior to their dispersal to employees?
true
Simply using a mobile device in a public area can be considered a risk.
Type I
What PC Card type is typically used for memory??
enable a lock screen
What can be enabled to prevent a mobile device from being used until a user enters the correct passcode, such as a pin or password?
false
The Google Android mobile operating system is a proprietary system, for use on only approved devices.?
secure digital input output (SDIO)
What SD card family can be used to transmit pictures over a wireless network to a laptop hard drive or wireless printer??
ExpressCard
The PC Card and CardBus devices are being replaced by what technology?
Web-based
Select below the type of computing device that uses a limited version of the Linux operating system and uses a web browser with an integrated media player:
Mobile device management (MDM)
What type of management system below can help facilitate asset tracking?
Removable media storage
Select below the item that is not considered to be a basic characteristic of mobile devices:
asset tracking
Maintaining an accurate record of company-owned mobile devices
secure digital
A small form factor storage media of a variety of different types and sizes.
On-boarding
The ability to rapidly enroll new mobile devices.?
Remote wiping
The ability to remote erase sensitive data stored on a mobile device?
mobile application management (MAM)
The tools and services responsible for distributing and controlling access to apps.?
geo-tagging
Adding or allowing geographical identification data in a mobile app?
geo-fencing
Using a mobile device’s GPS to define geographical boundaries where an app can be used.?
off-boarding
The ability to quickly remove devices from the organization’s network?
lock screen
A technology that prevents a mobile device from being used until the user enters the correct passcode.?
location services
Services that can identify the location of a person carrying a mobile device or a specific store or restaurant.?
false
Mobile devices such as laptops are stolen on average once every 20 seconds.
true
A QR code can store website URLs, plain text, phone numbers, e-mail addresses, or virtually any alphanumeric data up to 4296 characters.?
personal digital assistant
What term below describes a hand-held mobile device that was intended to replace paper systems, and typically included an appointment calendar, an address book, a “to-do” list, a calculator, and the ability to record limited notes?
extreme capacity (SDXC)
Select below the option that is not one of the SD format card families:
mobile application management
?How can an administrator manage applications on mobile devices using a technique called “app wrapping?”
false
The CardBus is a 64-bit bus in the PC card form factor.
a video
A QR code can’t contain which of the following items directly?
iOS
What mobile operating system below requires all applications to be reviewed and approved before they can be made available on the public store front?
1234
What PIN is considered to be the most commonly used PIN?
location services
Mobile devices with global positioning system (GPS) abilities typically make use of:?
credential management
Mobile Device Management systems that allow users to store usernames and passwords within a device are said to be using:
RADIUS
Although designed to support remote dial-in access to a corporate network, what service below is commonly used with 802.1x port security for both wired and wireless LANs?
rule based access control
Which access control model can dynamically assign roles to subjects based on a set of defined rules?
discretionary access control
Which access control model is considered to be the least restrictive?
DIT
Entries within a Directory Information Base are arranged in a tree structure called the:
false
Group policy is a Unix feature that allows for the centralized management and configuration of computers and remote users using Unix Active Directory.
gray
In a UAC prompt, what color is used to indicate the lowest level of risk?
role based access control
Select below the access control model that uses access based on a user’s job function within an organization:
Kerberos
Select below the authentication system developed by the Massachusetts Institute of Technology (MIT) to verify the identity of network users:
mandatory access control
What access control model below is considered to be the most restrictive access control model, and involves assigning access controls to users strictly according to the custodian?
False
Authorization and access are viewed as synonymous and in access control, they are the same step.
authentication request
During RADIUS authentication, what type of packet includes information such as identification of a specific AP that is sending the packet and the username and password?
operation
The action that is taken by a subject over an object is called a(n):
subject
A user or a process functioning on behalf of the user that attempts to access an object is known as the:
true
The Bell-LaPadula (BLP) model of MAC can be used to prevent subjects from creating a new object or performing specific functions on objects that are at a lower level than their own.?
true
A shield icon warns users if they attempt to access any feature that requires UAC permission.
access control model
What is the name for a predefined framework that can be used for controlling access, and is embedded into software and hardware?
separation of duties
A vulnerable process that is divided between two or more individuals to prevent fraudulent application of the process is known as:
TACACS
What authentication service commonly used on UNIX devices involves communicating user authentication information to a centralized server?
ACL
A list that specifies which subjects are allowed to access an object and what operations they can perform on it is referred to as a(n):
false
The strength of RADIUS is that messages are always directly sent between the wireless device and the RADIUS server.
least privilege
Providing only the minimum amount of privileges necessary to perform a job or function.?
discretionary access control
The least restrictive access control model in which the owner of the object has total control over it.?
separation of duties
The practice of requiring that processes should be divided between two or more individuals.
job rotation
The act of moving individuals from one job responsibility to another.?
account expiration
The process of setting a user’s account to expire
time-of-day restriction
Limitation imposed as to when a user can log in to a system or access resources.
mandatory access control
The most restrictive access control model, typically found in military settings in which security is of supreme importance.
LDAP injection control
An attack that constructs LDAP statements based on user input statements, allowing the attacker to retrieve information from the LDAP database or modify its content.
TACACS+
The current version of the Terminal Access Control Access Control System (TACACS) authentication service.?
extended TACACS
The second version of the Terminal Access Control Access Control System (TACACS) authentication service.?
LDAP injection
What kind of attack allows for the construction of LDAP statements based on user input statements, which can then be used to access the LDAP database or modify the database’s information?
orphaned
User accounts that remain active after an employee has left an organization are referred to as being what type of accounts?
account expiration
To assist with controlling orphaned and dormant accounts, what can be used to indicate when an account is no longer active?
DAP
The X.500 standard defines a protocol for a client application to access an X.500 directory known as which of the following options?
roles
When using Role Based Access Control (RBAC), permissions are assigned to:
identity management
The use of a single authentication credential that is shared across multiple networks is called:
password
A secret combination of letters, numbers, and/or characters that only the user should have knowledge of, is known as a:
true
Geolocation is the identification of the location of a person or object using technology, and can be used as part of an authentication method.
charmap.exe
A list of the available nonkeyboard characters can be seen in Windows by opening what utility?
standard biometrics
What kind of biometrics utilizes a person’s unique physical characteristics for authentication, such as fingerprints or unique characteristics of a person’s face?
offline cracking
What type of attack involves an attacker stealing a file containing password digests and comparing the digests with digests created by the attacker?
time-based one-time password(TOTP)
What type of one-time password (OTP) changes after a set time period?
single sign on
The use of one authentication credential to access multiple accounts or applications is referred to as?
false
Passwords provide strong protection.
hybrid
What variation of a dictionary attack involves a dictionary attack combined with a brute force attack, and will slightly alter dictionary words by adding numbers to the end of the password, spelling words backward, slightly misspelling words, or including special characters?
human memory
What is the center of the weakness of passwords?
true
Token credentials can be revoked at any time by the user without affecting other token credentials issued to other sites.
brute force
What type of attack involves using every possible combination of letters, numbers, and characters to create candidate digests that are then matched against those in a stolen digest file?
cognitive biometrics
Which type of biometrics is based on the perception, thought process, and understanding of the user?
rainbow tables
The use of what item below involves the creation of a large pregenerated data set of candidate digests?
common access card
A U.S. Department of Defense (DoD) smart card that is used for identification of active-duty and reserve military personnel along with civilian employees and special contractors is called:
dwell time
Which term below describes the time it takes for a key to be pressed and then released?
OAuth
What federated identity management (FIM) relies on token credentials?
salt
What can be used to increase the strength of hashed passwords??
true
OpenID is an example of a web-based federated identity management (FIM) system.?
protocol analyzer
Passwords that are transmitted can be captured by what type of software?
false
Using a rainbow table to crack a password requires three steps: Creation of the table, comparing the table to known hash values, and decrypting the password.
MD5
Which hashing algorithm below is used with NTLMv2’s Hashed Message Authentication Code?
single sign-on
Using one authentication credential to access multiple accounts or applications.?
authentication factors
Five elements that can prove the genuineness of a user: what you know, what you have, what you are, what you do, and where you are.
token
A small device that can be affixed to a keychain with a window display that shows a code to be used for authentication.
brute force attack
A password attack in which every possible combination of letters, numbers, and characters is used to create encrypted passwords that are matched against those in a stolen password file.?
key stretching
A password hashing algorithm that requires significantly more time than standard hashing algorithms to create the digest.?
Bcrypt
A popular key stretching password hash algorithm?
salt
A random string that is used in hash algorithms.
hybrid attack
A password attack that slightly alters dictionary words by adding numbers to the end of the password, spelling words backward, slightly mispelling words, or including special characters.
?NTLM (New Technology LAN Manager) hash
?A hash used by modern Microsoft Windows operating systems for creating password digests.
dictionary attack
A password attack that creates encrypted versions of common dictionary words and compares them against those in a stolen password file.?
OAuth
What technology allows users to share resources stored on one site with a second site without forwarding their authentication credentials to the other site?
OpenID
Select below the decentralized open-source FIM that does not require specific software to be installed on the desktop:
portable computers, tablets, smartphones, wearable technology, and legacy devices.
mobile devices
devices that closely resemble standard desktop computers. ex. laptop, notebook, ultrabook, subnotebook, web-based, tablets
portable computer
portable computing devices that are generally larger than smartpones and smaller than notebooks, and are focused on ease of use
tablet
traditional cellular telephone that includes a limited number of features, such as a camera, an MP3 music player, and ability to send and receive short message service text messages.
feature phone
has all the tools that a feature phone has but also includes an OS that allows it to run apps and access the Internet.
Smartphone
consists of devices that can be worn by the user instead of carried. ex smartwatch and google glass
wearable technology
mobile devices that are no longer widely in use. ex PDA and netbook
legacy devices
1. keep the mobile device out of sight when traveling in a high-risk area.
2. avoid becoming distracted by what is on the device. always maintain an awareness of your surroundings.
3. when holding a device, use both hands to make it more difficult for a thief to snatch.
4 do not use the device on escalators or near transit train doors.
5 white or red headphone cords may indicate they are connected to an expensive device. consider changing the cord to a less conspicuous color
6. if theft does occur, do not resist or chase the thief. instead, take note of the suspects description, including any identifying characteristics and clothing then call the authorities.
theft
discretionary access control-least restrictive, every object has an owner, who has total control over the object. Owners can access their objects freely. Poses risks in that it relies on decisions by the end-user to set the proper level of security. a subject’s permissions will be “inherited” by any programs that the subject executes.
mandatory access control- most restrictive, assigns users access controls strictly according to the custodian’s desires. User has no freedom to set any controls.
Role based access control-access is based on a user’s job function within an organization.
Rule based access control-dynamically assign roles to subjects based on a set of rules defined by a custodian.
access control models, how they work, strengths and weaknesses
most effective passwords are long and complex.-however these are difficult for users to memorize and then accurately recall when needed.
users must remember passwords for many different accounts.
for the highest level of security, each account password should be unique, which further strains human memory
many security policies mandate that passwords expire after a set period of time, such as every 45-60 days.
passwords.human memory, weaknesses
uses a cryptographic one-way function- instead of encrypting the password with another key, the password itself is the key. considered to be very weak for storing passwords. not case-sensitive, splits all passwords into 2 7-character parts,
ntlm (new technology lan manager)- does not limit to 2 7-character parts.-does not support recent cryptographic methods.
ntlmv2- uses Hashed Message Authentication Code with MD5.-not considered secure for creating digests because these hashing algorithms are designed to create a digest as quickly as possible.
lan manager passwords, vulnerabilities

Need essay sample on "IST266 test 4"? We will write a custom essay sample specifically for you for only $ 13.90/page

Can’t wait to take that assignment burden offyour shoulders?

Let us know what it is and we will show you how it can be done!
×
Sorry, but copying text is forbidden on this website. If you need this or any other sample, please register

Already on Businessays? Login here

No, thanks. I prefer suffering on my own
Sorry, but copying text is forbidden on this website. If you need this or any other sample register now and get a free access to all papers, carefully proofread and edited by our experts.
Sign in / Sign up
No, thanks. I prefer suffering on my own
Not quite the topic you need?
We would be happy to write it
Join and witness the magic
Service Open At All Times
|
Complete Buyer Protection
|
Plagiarism-Free Writing

Emily from Businessays

Hi there, would you like to get such a paper? How about receiving a customized one? Check it out https://goo.gl/chNgQy

We use cookies to give you the best experience possible. By continuing we’ll assume you’re on board with our cookie policy