Logical Security Concepts

What is a security rule that prevents users from accessing information and resources that lie beyond the scope of their responsibilities

Principle of least privilage

What is a security approach that eliminates implicit trust from networks requireing all users and devices to be continuously verified before being granted access to resources

Zero Trust model

What is the acronym that refers to a logical security rule set that controls access to objects and specifies the operations allowed on a given object

ACL

What are examples of knowledge-based authentication factors (something you know)

• Usernames

• Passwords

• PINs

• Security question answers

What are examples of possesion-based authentication factors (something you have)

• Smart cards

• Key fobs

• Security keys

What are examples of inherence-based authentication factors (something you are)

• Fingerprints

• Iris scans

• Facial recognition

• Voice patterns

What are some examples of location-based authentication factors (somewhere you are)

• Geolocation data

• IP addresses

What is the term for an authentication system that requires two or more distinct authentication factors

Multifunction authenticaiton

What MFA method sends a code to an account’s associated inbox after typing in a password

Email

What MFA device is a ESB-based cryptographic key

Hardware token

What could cause a user’s failed login attempt using an authenticatior app to report that the code from the app is incorrect

The users device is set to the wrong time

What MFA delivery method sends a text verification code

SMS

What MFA delivery method sends a one-time verification code or approval prompt through an automated or live telephone call

Voice call MFA

What are some characteristics of TOTP

• Generated offline usimg a shared secret and the current time

• Requires time synchronization between client and server

• Commonly implemented in authenticator apps and hardware tokens

What acronym is used to describe a general category of single-use authentication codes

OTP

What is the markup language that is most used for exchanging authentication and authorization data

SAML

What is an authentication subsystem that enables users to access multiple, connected system components (such as seperate hosts on a network) after a single login on only one of the components

SSO

What refers to a security measure that grants temporary, on-demand, and limited-time access to privileged accounts

Just-in-time access

What refers to a cybersecurity tool dedicated to managing, monitoring, and securing access to critical systems and accounts with elevated privileges

PAM

WHat software provides a solution specifically designed to centrally manage, monitor, and secure moblile devices

MDM

What acronym refers to a dedicated software or hardware-based security solution designed to detect and prevent unauthorized use and transmission of confidential information

DLP

What is a comprehensive security framework that manages the entire lifecycle of a digital identity (such as a user account or device) and controls how it can access organizational resources

IAM