Active Directory Membership
These types of accounts belong to a vendor or are required to run a tool.
What is a "service" account?
A policy or group of settings that permit or deny traffic from certain ports, services, sources, and destinations.
What is a ruleset?
The software the "divvies" up computing resources.
What is a hypervisor?
You would use this to override the precedence of other group policies.
A tool that centralizes all log sources.
What is the SIEM?
System administrators with domain admin privileges should use this to perform normal daily tasks (check e-mail, attend meetings, etc.)
What is a separate user account?
This perimeter layer of a network shields internal networks from unknown connections while allowing certain systems to be publicaly accessible.
What is a DMZ?
This hypervisor is deployed on an Operating System.
What is Type 2?
Use this to prevent a higher-level GPO setting from applying in this OU.
What is "Block Inheritance?"
A server that specializes in authenticating other objects.
What is a domain controller?
Use this tool to protect the built-in local administrator account.
What is "LAPS"?
What is redundancy?
This concept facilitates the dynamic allotment of computing power.
What is "Resource Pooling"?
A tool used to protect shared passwords and log access to the account.
What is "Administrators"?
A direct connection allowing authentication via the CLI onto the Firewall.
These two types of traffic should be segmented in a virtualized environment.
What is migration and management?
This is a GPO in the structure but it's settings are not on the examined object.
What is an unapplied GPO?
In this IaaS set-up, end-users connect to a temporary virtual machine to access company resources.
What is VDI?
A method of distributing access rights where special priveleges are only temporary.
What is "Check-in / Check-Out"?
The permission or denial of connections based on the context of packets in network traffic.
What is "stateful" inspection?
An alternative term for a hypervisor.
What is a virtual machine monitor (VMM)?
You can use group policies for this piece of configuration management.
What is "Security Baselines?"
On most next generation Cisco appliances, this is built-in to the devices' settings.
What is "a Default Deny" rule?