Domain 5 Identity and Access Management

Question 1

What is port knocking?

Answer 1

Authentication method used by network administrators. This makes use of a firewall to allow a client who knows the “secret” knock to enter the network through a particular port by performing a sequence of connection attempts (known as a knock sequence)

Question 2

What is the difference btween Access Control Lists and Capability Tables?

Answer 2

A capability table stipulates the access rights whihc belong to a specified subject, in relation to detailed objects.

ACLs provide the description of the subjects whihc are authorised to access a specific object, and captures the level of authorisation that subjects are granted.

i.e. ACLs are related/attached to an object. Whereas capability tables are related/attached to a subject.

Question 3

What is S-RPC?

Answer 3

Secure Remote Procedure call provides authentication service and is a method to prevent unauthorised execution of code on remote systems.