Access Control Models
Validating a subject's (user's) identity
What is Authentication
Used by Microsoft Active Directory
What is Single Sign-On
An implementation of DAC
What is DACL
Windows system functions independently.
What is standalone
A group of related domains
What is a Tree
Maintaining a record of a subject’s activity
What is Accounting or Auditing
Used to prove software can be trusted
What is Attestation
Used by Microsoft for auditing
What is SACL
Peer to peer network
What is Workgroup
Copying changes to AD on the Domain Controller
Access controls deter intrusion or attacks
What is Preventive
Used when app is installed and you want to use Facebook to log in.
What is OAuth and OpenID Connect
Is issued when logging into a system.
What is SID (SecurityID)
Either provides or consumes services but not both
What is domain or Client-Server
Giving access to part of AD without giving full access
What is delegation
Restriction of data that is highly sensitive
What is Need to Know
Biometric is an example of what type of MFA
What is something you are
Cumulative. Combination of inherited permissions and explicit permissions.
What is Effective Permissions
User, Group and computer are examples of this
What is objects
What actions a given user can do
What is local policies/user rights
Identifies users or groups who are not allowed access.
What is Explicit Deny
Developed by MIT
What is Kerberos
Deny will always win
What is deny permissions
Cloud based
What is Azure Active Directory
Allows for enabling and configuring Bitlocker, offline files and parental controls.
What is Administrative Templates