test two

chapters 5-7

Workgroup Model

A LAN networking model that involves decentralized user account databases on each individual computer

. Domain Model

A LAN networking model that uses one or more servers and Active Directory to centralize user account control and resource management

. Client/Server Model

A networking model where clients connect to a centralized server for applications or services, and processing primarily occurs on the server

. Local Accounts

User accounts that exist on a single computer and can be used to control access to resources only on that specific computer

Kerberos Protocol

An authentication protocol used in Windows Active Directory that verifies user identity and grants secure access to network resources using encrypted digital tickets.

. Domain Accounts

User accounts stored in Active Directory that are recognized throughout the domain and can control resources on all domain computers

. System Account

A special built-in Windows account that represents the operating system and possesses many of the same privileges as the administrator

. Guest Account

A restricted user account created automatically on a Web server (such as in IIS) to allow anonymous users to view Web pages

. Root Account

The Linux superuser account that has full access to everything on the system, uniquely identified by a User ID (UID) of 0 and Group ID (GID) of 0

. Daemon Accounts

Restricted, individual user accounts assigned to specific background programs or services in Linux to limit security risks

. User ID (UID)

A unique numeric identifier assigned to a user in Linux; UIDs under 100 are reserved for system users, while regular users start at 500 in Red Hat Linux

. Group ID (GID)

A unique numeric identifier assigned to a set of users in Linux

. NTFS Permissions

Detailed file system access controls in Windows required on NTFS-formatted drives to regulate user and group access to files and folders

. Full Control Permission

A Windows NTFS permission that includes all other permissions and allows taking ownership and changing file attributes

. Modify Permission

A Windows NTFS permission that allows reading, writing, and deleting files or folders

. List Folder Contents Permission

A Windows NTFS standard permission that applies exclusively to folders, allowing users to view the files and subfolders within

. Linux File Permissions

Access rights in Linux categorized into Read (4), Write (2), and Execute (1), evaluated separately for Owner (User), Group, and Others

. chmod

The primary Linux command-line utility used to modify file and directory access permissions using numeric digits (0-7) or symbolic notation

. Share Permissions

Access controls applied to shared network folders in Windows, consisting of Full Control, Change, and Read

. Most Restrictive Rule

The rule stating that when share permissions and NTFS permissions are combined, the most restrictive permission takes precedence

. Group Policy

Centralized administrative rules in Windows Active Directory used to enforce network policies, such as password parameters and user rights

HTTP (Hypertext Transfer Protocol)

The protocol governing how Web servers and browsers format and exchange messages for retrieving Web pages

. Stateless Protocol

A protocol characteristic where each transmitted Web page or request is completely independent of every other request sent by the server

. KeepAlive (Persistent Connections)

A setting in HTTP 1.1 that maintains an open TCP connection allowing a browser to receive multiple files in a single connection

. Web Server Root

The physical directory location on a Web server where default HTML documents and subfolders are stored (e.g., c:\inetpub\wwwroot for IIS, /var/www/html for Apache)

. apachectl

The command-line control utility used to start, stop, and restart the Apache Web server in Linux

. Internet Information Services (IIS)

Microsoft's GUI-based Web server software integrated into Windows Server operating systems

. IIS Locked Down Mode

The default installation security mode in IIS 6.0 that permits only static HTML files to serve, disabling dynamic features like ASP unless explicitly allowed

. Hosting by Port Number

Hosting multiple websites on a single server by assigning each site a unique TCP port above 1023 (e.g., port 8080)

. Hosting by IP Address

Hosting multiple websites by assigning multiple physical or virtual IP addresses to a network interface card on the server

. Hosting by Host Name (Name Virtual Hosting)

The most common virtual hosting method where multiple domain names share a single IP address on port 80, using the HTTP Host header to route requests

. Virtual Host

An Apache configuration that allows a single server process to run multiple distinct websites or domains

. Virtual Directory

A Web directory that appears to be located beneath the Web server root, but is physically stored elsewhere on the disk, on a network share, or redirected to a URL

. Alias Directive

An Apache directive in httpd.conf used to map a virtual directory name to its physical file path on the system

. WebDAV (Web Distributed Authoring and Versioning)

An HTTP extension service in IIS and Apache that enables users to manage and share files on a Web server

Static Web Page

A page that contains only HTML statements and is sent to the browser without any processing

Dynamic Web Page

A page that contains programming statements to customize its output

Database Management System (DBMS)

A system that stores data on a computer in an organized format, typically using SQL to define and manipulate the data for processing

Relational Database

A database structure that organizes data into tables containing rows and columns

Table

A container of organized data in a database with columns and rows similar to a spreadsheet, where each column describes a specific characteristic

Row

Data stored in a record in a database table

Column

An attribute or characteristic of a table in a relational database

Primary Key

In a table, one or more columns whose values uniquely define the contents of the row

Foreign Key

A column in one table that is related to a primary key in another table

Normalization

The series of rules for organizing data into tables where all columns not part of the primary key are related solely to the primary key, and not to each other

Structured Query Language (SQL)

The language used to interact with a relational database management system using English-like statements

Data Manipulation Language (DML)

The part of SQL that does the inserting, updating, deleting, and selecting of data, and is the most common part of SQL used in programming

Data Definition Language (DDL)

The part of SQL that creates the tables and other objects in a database

Data Control Language (DCL)

The part of SQL that controls access to the data and tables, often through usernames and passwords

SELECT

A Data Manipulation Language (DML) statement used to retrieve data from a database table

INSERT

A Data Manipulation Language (DML) statement used to insert new data rows into a table

UPDATE

A Data Manipulation Language (DML) statement used to modify existing data within a table

DELETE

A Data Manipulation Language (DML) statement used to delete records from a table

CREATE

A Data Definition Language (DDL) statement used to create tables and other objects in the database

ALTER

A Data Definition Language (DDL) statement used to alter the structure of a database

DROP

A Data Definition Language (DDL) statement used to delete objects from the database

TRUNCATE

A Data Definition Language (DDL) statement used to remove all records from a table, including removing all allocated space

GRANT

A Data Control Language (DCL) statement that gives users access privileges to a database

REVOKE

A Data Control Language (DCL) statement that withdraws access privileges given with the GRANT command

Microsoft Access

A file-based DBMS designed for smaller databases that is easy to learn and use, but lacks built-in security, disaster recovery, and undo capabilities

Microsoft SQL Server

A sophisticated commercial DBMS commonly used in Windows/IIS environments that handles large databases and integrates with ASP.NET

MySQL

A high-performance, open-source database management system available for free, commonly used with Apache in Linux environments

Cookie

Text that a Web site stores on your disk that can be retrieved by the Web server whenever you visit the site

Open Database Connectivity (ODBC)

A technology that acts as an intermediary between the DBMS and the programming language

Object Linking and Embedding Database (OLE DB)

A database connectivity standard from Microsoft that is faster and more flexible than ODBC

Java Database Connectivity (JDBC)

A technology that enables Java programs to execute SQL statements and connect to database management systems

Data Source Name (DSN)

A connection to a database created on the server (via the Windows Control Panel) that isolates detailed database configuration information from application code

Active Server Pages (ASP)

A Web-based programming language created by Microsoft for Windows Web servers to generate dynamic pages

Active Server Pages .NET (ASP.NET)

A Web-based programming environment created by Microsoft based on ASP that allows for dynamic page creation and includes code optimized for SQL Server

PHP (PHP Hypertext Preprocessor)

A Web-based scripting language commonly used with Apache Web servers to create dynamic Web pages and communicate with MySQL

Common Gateway Interface (CGI)

A protocol that allows the operating system to interact with the Web server, often using scripting languages like Perl

char Data Type

A SQL data type that defines a fixed character length and always takes up the maximum space allowed by its definition

varchar Data Type

A SQL data type that defines variable-length character text, taking up only the actual space needed for the data

Linux Permission Targets

Access rights assigned across three distinct categories: Owner (User), Group, and Others.

Linux Read Permission (r)

Allows viewing or copying file contents; on directories, allows listing files and subfolders using commands like ls (numeric value = 4).

Linux Write Permission (w)

Allows editing, modifying, or deleting a file; on directories, allows creating or removing files inside the folder (numeric value = 2).

Linux Execute Permission (x)

Allows running an executable script or program file; on directories, allows entering or accessing the directory using cd (numeric value = 1).

chmod Numeric Value 4

Assigns Read-only (r--) access to a user, group, or others in Linux.

chmod Numeric Value 2

Assigns Write-only (-w-) access to a user, group, or others in Linux.

chmod Numeric Value 1

Assigns Execute-only (--x) access to a user, group, or others in Linux.

chmod Numeric Value 7

Assigns full Read, Write, and Execute (rwx) access (4 + 2 + 1) to a user, group, or others.

chmod Numeric Value 6

Assigns Read and Write (rw-) access (4 + 2) to a user, group, or others.

chmod Numeric Value 5

Assigns Read and Execute (r-x) access (4 + 1) to a user, group, or others.

chmod 755

Gives the file Owner full rights (7 = rwx), while Group and Others get Read and Execute rights (5 = r-x).

chmod 644

Gives the file Owner Read and Write rights (6 = rw-), while Group and Others get Read-only rights (4 = r--).

NTFS File System

The standard Windows file system required to set granular file-level and folder-level security permissions.

Full Control (NTFS)

Grants complete administrative access to a file or folder, including changing permissions and taking ownership.

Modify (NTFS)

Allows reading, writing, editing, creating, and deleting files or subfolders, but does not allow changing security permissions or taking ownership.

Read & Execute (NTFS)

Allows viewing/reading file contents AND running executable application programs; includes List Folder Contents.

List Folder Contents (NTFS)

A folder-level permission that allows viewing the names of files and subdirectories located inside a directory.

Read (NTFS)

Allows viewing and reading file or folder contents, but prevents running executable files or making edits.

Write (NTFS)

Allows saving changes to existing files and creating new files or folders.

Windows Share Permissions

Network-level access controls applied to shared folders across a LAN, consisting of Full Control, Change, and Read. Effective Permission Rule

Authentication

The process of determining and verifying a user's true identity (confirming who you are) before granting access.

What You Know Authentication

The most common authentication method based on private knowledge, such as user names, passwords, or PINs

What You Have Authentication

An authentication method based on physical items, such as smart cards, entry cards, or security tokens.

Who You Are Authentication

An authentication method based on biometrics, such as fingerprints, facial recognition, or voice patterns

HTTP 1.1

The current version of HTTP that supports persistent connections (KeepAlive), allowing browsers to request and receive multiple files over a single TCP connection.

Port 80

The standard, default TCP network port used by web servers to listen for and serve unencrypted HTTP web traffic.

Port 443

The standard TCP network port used by web servers to establish secure, encrypted HTTPS communications via SSL/TLS.