Exam 6: Security Technology: Access Controls, Firewalls, and Vpns

The popular use for tunnel mode VPNs is the end-to-end transport of encrypted data. _________________________

Good firewall rules include denying all data that is not verifiably authentic.

A(n) ____________________ private network is a secure network connection between systems that uses the data communication capability of an unsecured and public network.

The false reject rate describes the number of legitimate users who are denied access because of a failure in the biometric device. _________________________

A content filter, also known as a reverse firewall, is a network device that allows administrators to restrict access to external content from within a network.

Though not used as much in Windows environments, terminal emulation is still useful to systems administrators on Unix/Linux systems.

What must a VPN accomplish to offer a secure and reliable capability while relying on public networks?

Briefly describe the best practice rules for firewall use.

All data that is not verifiably authentic should be denied.

Packet-filtering firewalls scan network data packets looking for compliance with the rules of the firewall's database or violations of those rules.

Because the bastion host stands as a sole defender on the network perimeter, it is commonly referred to as the ____________________ host.

A firewall cannot be deployed as a separate network containing a number of supporting devices.

Secure VPNs use security protocols and encrypt traffic transmitted across unsecured public networks like the Internet. _________________________

In SESAME, the user is first authenticated to an authentication server and receives a token. The token is then presented to a privilege attribute server as proof of identity to gain a(n) __________.

An attacker who suspects that an organization has dial-up lines can use a device called a(n) war dialer to locate the connection points. _________________________

List and describe the interacting services of the Kerberos system.

The ____________________ describes the number of legitimate users who are denied access because of a failure in the biometric device. This failure is known as a Type I error.

The primary benefit of a VPN that uses _________ is that an intercepted packet reveals nothing about the true destination system.

The service within Kerberos that generates and issues session keys is known as __________.

____________________ is a firewall type that keeps track of each network connection between internal and external systems using a table and that expedites the processing of those communications.