Identity and Access Management Flashcards by Dave-Brad Kaczmarek

NTFS file permissions

full control
modigy
read and execute
read
write
special permissions

How well did you know this?

Not at all

Perfectly

ACL

-List of information to handle how everyone is given access

Access Control List

How well did you know this?

Not at all

Perfectly

Federated Sytstem

System that is trusted by the domain

How well did you know this?

Not at all

Perfectly

Samba

Allows Linux machines to use Active Directory

How well did you know this?

Not at all

Perfectly

KDC

-Windows Domain Controller is known as KDC

Key Distribution Center

How well did you know this?

Not at all

Perfectly

PIV card

-Picture and Identification information

Personal Identity Verification card

How well did you know this?

Not at all

Perfectly

Windows File Permissions

-moving files on same hard drive to a new location what happens to permissions?

Keeps permissions

How well did you know this?

Not at all

Perfectly

Linux File Permissions

D RWX RWX RWX

Directory
Owner
Group
Everyone

How well did you know this?

Not at all

Perfectly

Multifactor Authentication

Using more than one authentication factor

ex: finger print and password

How well did you know this?

Not at all

Perfectly

Linux command for editing permissions

chmod
O= everyone (stands for other)
G= group
A= all 3 catergories

How well did you know this?

Not at all

Perfectly

Kerberos

Authentication protocol used to authenticate to windows domain controller
-Uses port 88

How well did you know this?

Not at all

Perfectly

NTFS folder permissions

full control
modigy
read and execute
list folder content
read
write
special permissions

How well did you know this?

Not at all

Perfectly

PAP

Sends username and password in the clear
Not used very often anymore

Password Authentication Protocol

How well did you know this?

Not at all

Perfectly

Implicit Deny

Always denies unless told otherwise

How well did you know this?

Not at all

Perfectly

AAA

Authentication
Authorization
Accounting

How well did you know this?

Not at all

Perfectly

CHAP

Uses a hash value to authenticate
Sends the hash to whoever is trying to get authenticated as the challenge - they have to recreate the hash using the same shared key and send back as proof

Challenge-Handshake Authentication Protocol

How well did you know this?

Not at all

Perfectly

SAML

Used for web applications
Single Sign-On allows access between an identity provider and a service provider

Security Assertion Markup Language

How well did you know this?

Not at all

Perfectly

Linux permissions (numbers = permissions)

0 = ---
1 = --x
2 = -w-
3 = -wx
4 = r--
5 = r-x
6 = rw-
7 = rwx

How well did you know this?

Not at all

Perfectly

File system that doesn’t support windows permissions

Fat32

How well did you know this?

Not at all

Perfectly

Linux command for changing owner

Study These Flashcards

sudo chown

Windows system for passwords and general management

-Usually for that particular local machine

Study These Flashcards

Local Security Policy

RBAC

Most common
Access to resources is defined by your role

Study These Flashcards

Role-Based Access Control

Windows File Permissions

-copying files from drive letter to another drive letter on the same hard drive what happens to permissions?

Study These Flashcards

Loses permissions

Rights and Privileges

Study These Flashcards

Mostly used for system function access

MAC | -Labels "top secret"

Mandatory Access Control

TGT | -Shows that you're authenticated to domain

Ticket Granting Ticket

TACACS+ - Decouples the authorization from the authentication - Uses TCP port 49

Terminal Access Controller Access-Control System Plus

LDAP - Used to access other directories/resources - More of a language than authentication protocol

Lightweight Directory Access Protocol | -Uses TCP and UDP port 389

``` RADIUS -Used in wireless authentication -Can use ports: 1812 1813 1645 1646 ```

Remote Authentication Dial-In User Service

RSA Key

Software/key that stores a secret code that changes every so often - "something you have"

Authorization

What rights you have to the system once you've been authenticated

CAC card | -Picture and Identification

Common Access Card

Least Privilege

Always give the least amount of privilege to users for them to do their job

RADIUS client

Gateway for server and user

NTLM - Like CHAP but both ways - Client and server each challenge the other side with a hash value

NT Lan Manager

HOTP | -fob creates single use code using key and counter

HMAC-based One-Time Password algorithm

Identification

Proves who you are to the authenticating system

Group Policy Objects Management

Found in Active Directory | Can be applied to domains/individual sites/groups

What are the 5 Authentication Factors

1. Something you know - password 2. Something you have - smartcard/key fob 3. Something about you - retinal scanners 4. Something you do - rhythm of typing can be used 5. Somewhere you are - geography/zip code getting gas

RADIUS server

Holds or has access to passwords/usernames

Authentication

Proving you have the rights to that system | ex: password

Windows File Permissions | -copying files from drive to another drive what happens to permissions?

Loses permissions

Linux command for changing password

sudo passwd

Inheritance

When you give a folder permissions, anything created in that folder will have mirrored permissions with options greyed out

Permissions

Usually handled in groups for organizations - more used for files and resources

RADIUS supplicant

Person or system trying to get authenticated

Captcha

Used on websites - wonky lettering or pictures you have to identify to prove you're not a bot - "something you know"

DAC | -Whoever created data defines access

Discretionary Access Control

TOTP | -fob creates single use code using key and time of day

Time-based One-Time Password algorithm

Identity and Access Management Flashcards

(49 cards)