2.1 - Logical Security

What is FRT?

Facial recognition technology
A biometric authentication method that uses your face to verify identity.

What biometric feature does FRT use?

Your face.

What technologies are commonly used in facial recognition systems?

Laser dot projector, infrared camera, and 3D facial map.

How secure is facial recognition technology?

It is relatively secure, with about a 1 in 1,000,000 false acceptance rate.

What is a magnetometer used for?

Passive scanning to detect metal objects.

What is the principle of least privilege?

Rights and permissions should be set to the bare minimum needed to complete a task.

How should user accounts be configured under least privilege?

They should only have exactly the access needed to do their job.

What is zero trust?

A security model where no device, user, or process is inherently trusted.

How do many traditional networks behave on the inside?

Once inside the firewall, they often have few security controls.

What does zero trust require?

Verification of every device, every process, and every person.

What security methods are commonly used in zero trust?

Multi-factor authentication, encryption, system permissions, additional firewalls, monitoring, and analytics.

What are Access Control Lists (ACLs)?

Rules used to allow or deny traffic or access.

Where are ACLs commonly applied on a network?

On the ingress or egress of a router interface.

What criteria can ACLs evaluate?

Source IP, destination IP, TCP ports, UDP ports, and ICMP.

What actions can an ACL take when traffic matches?

Permit or deny the traffic.

Besides traffic filtering, what else can ACLs be used for?

NAT, QoS, and operating system file access control.

How are ACLs used in operating systems?

They allow or deny access to files and folders in the filesystem.

What are the main authentication factors in MFA?

Something you know, something you have, something you are, and somewhere you are.

Give an example of multi-factor authentication.

A password, a mobile app code, and your location.

Why is email authentication useful during registration?

It verifies that the user owns the email address provided.

What are authentication apps?

Software-based token generators that provide pseudo-random authentication codes.

What does TOTP stand for?

Time-based One-Time Password.

Does TOTP use an incremental counter?

No, TOTP uses time instead of a counter.

What must be configured before using TOTP?

A shared secret key and synchronized time, usually through NTP.

What does OTP stand for?

One-Time Password.

What forms can OTP tokens take?

Hardware tokens and software tokens.