An ultrabook is an example of what type of a portable computer?
A laptop may have multiple hardware ports. Which of the following is not a typical port included on a laptop?
track stolen devices
Which of the following selections is not one of the features provided by a typical MDM?
Select below the option that represents a wearable technology:?
What term is used to describe the operation of stockrooms where mobile devices are stored prior to their dispersal to employees?
Simply using a mobile device in a public area can be considered a risk.
What PC Card type is typically used for memory??
enable a lock screen
What can be enabled to prevent a mobile device from being used until a user enters the correct passcode, such as a pin or password?
The Google Android mobile operating system is a proprietary system, for use on only approved devices.?
secure digital input output (SDIO)
What SD card family can be used to transmit pictures over a wireless network to a laptop hard drive or wireless printer??
The PC Card and CardBus devices are being replaced by what technology?
Select below the type of computing device that uses a limited version of the Linux operating system and uses a web browser with an integrated media player:
Mobile device management (MDM)
What type of management system below can help facilitate asset tracking?
Removable media storage
Select below the item that is not considered to be a basic characteristic of mobile devices:
Maintaining an accurate record of company-owned mobile devices
A small form factor storage media of a variety of different types and sizes.
The ability to rapidly enroll new mobile devices.?
The ability to remote erase sensitive data stored on a mobile device?
mobile application management (MAM)
The tools and services responsible for distributing and controlling access to apps.?
Adding or allowing geographical identification data in a mobile app?
Using a mobile device’s GPS to define geographical boundaries where an app can be used.?
The ability to quickly remove devices from the organization’s network?
A technology that prevents a mobile device from being used until the user enters the correct passcode.?
Services that can identify the location of a person carrying a mobile device or a specific store or restaurant.?
Mobile devices such as laptops are stolen on average once every 20 seconds.
A QR code can store website URLs, plain text, phone numbers, e-mail addresses, or virtually any alphanumeric data up to 4296 characters.?
personal digital assistant
What term below describes a hand-held mobile device that was intended to replace paper systems, and typically included an appointment calendar, an address book, a “to-do” list, a calculator, and the ability to record limited notes?
extreme capacity (SDXC)
Select below the option that is not one of the SD format card families:
mobile application management
?How can an administrator manage applications on mobile devices using a technique called “app wrapping?”
The CardBus is a 64-bit bus in the PC card form factor.
A QR code can’t contain which of the following items directly?
What mobile operating system below requires all applications to be reviewed and approved before they can be made available on the public store front?
What PIN is considered to be the most commonly used PIN?
Mobile devices with global positioning system (GPS) abilities typically make use of:?
Mobile Device Management systems that allow users to store usernames and passwords within a device are said to be using:
Although designed to support remote dial-in access to a corporate network, what service below is commonly used with 802.1x port security for both wired and wireless LANs?
rule based access control
Which access control model can dynamically assign roles to subjects based on a set of defined rules?
discretionary access control
Which access control model is considered to be the least restrictive?
Entries within a Directory Information Base are arranged in a tree structure called the:
Group policy is a Unix feature that allows for the centralized management and configuration of computers and remote users using Unix Active Directory.
In a UAC prompt, what color is used to indicate the lowest level of risk?
role based access control
Select below the access control model that uses access based on a user’s job function within an organization:
Select below the authentication system developed by the Massachusetts Institute of Technology (MIT) to verify the identity of network users:
mandatory access control
What access control model below is considered to be the most restrictive access control model, and involves assigning access controls to users strictly according to the custodian?
Authorization and access are viewed as synonymous and in access control, they are the same step.
During RADIUS authentication, what type of packet includes information such as identification of a specific AP that is sending the packet and the username and password?
The action that is taken by a subject over an object is called a(n):
A user or a process functioning on behalf of the user that attempts to access an object is known as the:
The Bell-LaPadula (BLP) model of MAC can be used to prevent subjects from creating a new object or performing specific functions on objects that are at a lower level than their own.?
A shield icon warns users if they attempt to access any feature that requires UAC permission.
access control model
What is the name for a predefined framework that can be used for controlling access, and is embedded into software and hardware?
separation of duties
A vulnerable process that is divided between two or more individuals to prevent fraudulent application of the process is known as:
What authentication service commonly used on UNIX devices involves communicating user authentication information to a centralized server?
A list that specifies which subjects are allowed to access an object and what operations they can perform on it is referred to as a(n):
The strength of RADIUS is that messages are always directly sent between the wireless device and the RADIUS server.
Providing only the minimum amount of privileges necessary to perform a job or function.?
discretionary access control
The least restrictive access control model in which the owner of the object has total control over it.?
separation of duties
The practice of requiring that processes should be divided between two or more individuals.
The act of moving individuals from one job responsibility to another.?
The process of setting a user’s account to expire
Limitation imposed as to when a user can log in to a system or access resources.
mandatory access control
The most restrictive access control model, typically found in military settings in which security is of supreme importance.
LDAP injection control
An attack that constructs LDAP statements based on user input statements, allowing the attacker to retrieve information from the LDAP database or modify its content.
The current version of the Terminal Access Control Access Control System (TACACS) authentication service.?
The second version of the Terminal Access Control Access Control System (TACACS) authentication service.?
What kind of attack allows for the construction of LDAP statements based on user input statements, which can then be used to access the LDAP database or modify the database’s information?
User accounts that remain active after an employee has left an organization are referred to as being what type of accounts?
To assist with controlling orphaned and dormant accounts, what can be used to indicate when an account is no longer active?
The X.500 standard defines a protocol for a client application to access an X.500 directory known as which of the following options?
When using Role Based Access Control (RBAC), permissions are assigned to:
The use of a single authentication credential that is shared across multiple networks is called:
A secret combination of letters, numbers, and/or characters that only the user should have knowledge of, is known as a:
Geolocation is the identification of the location of a person or object using technology, and can be used as part of an authentication method.
A list of the available nonkeyboard characters can be seen in Windows by opening what utility?
What kind of biometrics utilizes a person’s unique physical characteristics for authentication, such as fingerprints or unique characteristics of a person’s face?
What type of attack involves an attacker stealing a file containing password digests and comparing the digests with digests created by the attacker?
time-based one-time password(TOTP)
What type of one-time password (OTP) changes after a set time period?
single sign on
The use of one authentication credential to access multiple accounts or applications is referred to as?
Passwords provide strong protection.
What variation of a dictionary attack involves a dictionary attack combined with a brute force attack, and will slightly alter dictionary words by adding numbers to the end of the password, spelling words backward, slightly misspelling words, or including special characters?
What is the center of the weakness of passwords?
Token credentials can be revoked at any time by the user without affecting other token credentials issued to other sites.
What type of attack involves using every possible combination of letters, numbers, and characters to create candidate digests that are then matched against those in a stolen digest file?
Which type of biometrics is based on the perception, thought process, and understanding of the user?
The use of what item below involves the creation of a large pregenerated data set of candidate digests?
common access card
A U.S. Department of Defense (DoD) smart card that is used for identification of active-duty and reserve military personnel along with civilian employees and special contractors is called:
Which term below describes the time it takes for a key to be pressed and then released?
What federated identity management (FIM) relies on token credentials?
What can be used to increase the strength of hashed passwords??
OpenID is an example of a web-based federated identity management (FIM) system.?
Passwords that are transmitted can be captured by what type of software?
Using a rainbow table to crack a password requires three steps: Creation of the table, comparing the table to known hash values, and decrypting the password.
Which hashing algorithm below is used with NTLMv2’s Hashed Message Authentication Code?
Using one authentication credential to access multiple accounts or applications.?
Five elements that can prove the genuineness of a user: what you know, what you have, what you are, what you do, and where you are.
A small device that can be affixed to a keychain with a window display that shows a code to be used for authentication.
brute force attack
A password attack in which every possible combination of letters, numbers, and characters is used to create encrypted passwords that are matched against those in a stolen password file.?
A password hashing algorithm that requires significantly more time than standard hashing algorithms to create the digest.?
A popular key stretching password hash algorithm?
A random string that is used in hash algorithms.
A password attack that slightly alters dictionary words by adding numbers to the end of the password, spelling words backward, slightly mispelling words, or including special characters.
?NTLM (New Technology LAN Manager) hash
?A hash used by modern Microsoft Windows operating systems for creating password digests.
A password attack that creates encrypted versions of common dictionary words and compares them against those in a stolen password file.?
What technology allows users to share resources stored on one site with a second site without forwarding their authentication credentials to the other site?
Select below the decentralized open-source FIM that does not require specific software to be installed on the desktop:
portable computers, tablets, smartphones, wearable technology, and legacy devices.
devices that closely resemble standard desktop computers. ex. laptop, notebook, ultrabook, subnotebook, web-based, tablets
portable computing devices that are generally larger than smartpones and smaller than notebooks, and are focused on ease of use
traditional cellular telephone that includes a limited number of features, such as a camera, an MP3 music player, and ability to send and receive short message service text messages.
has all the tools that a feature phone has but also includes an OS that allows it to run apps and access the Internet.
consists of devices that can be worn by the user instead of carried. ex smartwatch and google glass
mobile devices that are no longer widely in use. ex PDA and netbook
1. keep the mobile device out of sight when traveling in a high-risk area.
2. avoid becoming distracted by what is on the device. always maintain an awareness of your surroundings.
3. when holding a device, use both hands to make it more difficult for a thief to snatch.
4 do not use the device on escalators or near transit train doors.
5 white or red headphone cords may indicate they are connected to an expensive device. consider changing the cord to a less conspicuous color
6. if theft does occur, do not resist or chase the thief. instead, take note of the suspects description, including any identifying characteristics and clothing then call the authorities.
discretionary access control-least restrictive, every object has an owner, who has total control over the object. Owners can access their objects freely. Poses risks in that it relies on decisions by the end-user to set the proper level of security. a subject’s permissions will be “inherited” by any programs that the subject executes.
mandatory access control- most restrictive, assigns users access controls strictly according to the custodian’s desires. User has no freedom to set any controls.
Role based access control-access is based on a user’s job function within an organization.
Rule based access control-dynamically assign roles to subjects based on a set of rules defined by a custodian.
access control models, how they work, strengths and weaknesses
most effective passwords are long and complex.-however these are difficult for users to memorize and then accurately recall when needed.
users must remember passwords for many different accounts.
for the highest level of security, each account password should be unique, which further strains human memory
many security policies mandate that passwords expire after a set period of time, such as every 45-60 days.
passwords.human memory, weaknesses
uses a cryptographic one-way function- instead of encrypting the password with another key, the password itself is the key. considered to be very weak for storing passwords. not case-sensitive, splits all passwords into 2 7-character parts,
ntlm (new technology lan manager)- does not limit to 2 7-character parts.-does not support recent cryptographic methods.
ntlmv2- uses Hashed Message Authentication Code with MD5.-not considered secure for creating digests because these hashing algorithms are designed to create a digest as quickly as possible.
lan manager passwords, vulnerabilities
Need essay sample on "IST266 test 4"? We will write a custom essay sample specifically for you for only $ 13.90/page