Security (Level 1) HAM

SSO/Active Directory

100

(SSO1)What does SSO stand for?

Single Sign-On

100

(SSO2)What credential systems make up SSO?

Google, Active Directory, LDAP

100

(AD1)What is Active Directory? Who has it?

Active Directory (AD) is a directory service that Microsoft developed for Windows domain networks. Everyone at the university has AD credentials.

100

(AD2)Who can change Active Directory Passwords?

FT Staff, users can use SSO password site (maybe add go to TL for LDAP change so user can reset using SSO)

100

(AD3)When will a student’s AD (and LDAP) account be created for them?

1-2 business days after a new student pays their deposit, they will receive an email stating that their URI email account has been provisioned. This email indicates that their Google, LDAP, and AD accounts have been created and they can set up their SSO password.

Active Directory/LDAP/VPN

100

(AD4)What two accounts use the credentials provided by Active Directory?

Domain & Microsoft Office

100

(LDAP1)What does LDAP stand for?

Lightweight Directory Access Protocol

100

(LDAP2)What credentials in URI Systems does LDAP control?

WiFi, AcademicWorks, Library Services, WordPress

1. Sakai (formerly)

100

(VPN1)What is a VPN? What does the acronym stand for?

1. Creates a private network from a public internet connection
2. Virtual Private Network

100

(VPN2)Who at the university can apply for a VPN token?

1. Students who are studying abroad.
2. Faculty and Staff members who are doing research abroad.
3. Consultants/contractors with a staff sponsor.

VPN

100

(VPN3)Where is the request form located?

security.uri.edu/vpn/ → security.uri.edu/forms/vpn/

100

(VPN4)What app do you need installed to be able to connect to VPN?

Cisco AnyConnect Client

100

(VPN5)What devices are supported for the VPN token?

Windows, Mac, iOS, Android

100

(VPN6)What is the name of the program we now use for VPN? What must be put into the Cisco anyconnect app to connect?

DUO, connect.uri.edu

100

(VPN7)When logging into the Cisco AnyConnect application, what credentials do you use to log in?

AD username and SSO password

General Security(Cylance)/TAP

100

(GS5)What is Cylance? 

a.Cylance is the new antivirus and is replacing McAfee. Unless told otherwise by Bob, it will only be installed on URI owned computers

100

(GS5b) Where can you find more information regarding Cylance?

1. URI IT Security website
2. https://www.cylance.com/en-us/index.html

100

(GS6)Demonstrate how to install Cylance on a computer. 

Run the installer → copy & paste the installation token → Let Cylance install itself

100

(TAP1)What is TAP?

1. TAP (Targeted Attack Protection) is a system provided by Proofpoint that scans incoming email for known malicious hyperlinks and for attachments containing malware. TAP rewrites scanned URLs as Proofpoint URLs. TAP works behind-the-scenes, which means you do not need to do anything to activate or take advantage of the system.
2. Tl;dr - TAP is the system that protects URI emails. It consists of several layers that together help ensure that community members receive fewer phishing emails, less spam, and helps prevent emails with malicious attachments from being delivered to inboxes.

100

(TAP2)If a user receives an email from someone that seems like spam or malware, what should you do?

Forward the email to [e-mail]

General Security

100

(GS1)Demonstrate how to install, run and update Malwarebytes. Why is it important for Malwarebytes to be updated? Should you update MalwareBytes on an infected machine that already has Malwarebytes installed? Explain.

a.Malwarebytes Site, Download, launch. For updates > settings > check for updates

b. Because it is constantly updating its database of known viruses.

c. No, because the virus could interfere with the installation.

100

(GS2)What is Windows Defender? How do you activate Windows Defender in Windows 8/10?

a.Antivirus that comes with Windows OS

b.Settings → Update & Security → Windows Security → open Windows Security → Virus & Threat Protection (automatically on for 8/10 and turns off if third party scanner is installed)

100

(GS2)Demonstrate how to run a Windows Defender scan. 

Windows Search > Windows Security > Virus & Threat Protection > Quick Scan

100

(GS3)After running scans, how can you verify that a computer is functioning properly?

Restart the machine and try testing it out.

100

(GS4)When would you do a quick scan instead of a full scan?

If there is no real threat or suspicion of a virus.