Exam 6: Security Technology: Access Controls, Firewalls, and VPNS

The service within Kerberos that generates and issues session keys is known as __________.

A trusted VPN uses  ____________________ circuits from a service provider who gives contractual assurance that no one else is allowed to use these circuits and that they are properly maintained and protected.

​Lattice-based access control is a form of access control in which users are assigned a matrix of authorizations for particular areas of access.

A(n) ____________________ dialer is an automatic phone-dialing program that dials every number in a configured range and checks to see if a person, answering machine, or modem picks up.

When Web services are offered outside the firewall, HTTP traffic should be blocked from internal networks through the use of some form of proxy access or DMZ architecture.

Discretionary access control is an approach whereby the organization specifies use of resources based on the assignment of data classification schemes to resources and clearance levels to users.

Configuring firewall policies is viewed as much as a(n) __________ as it is a(n) __________.

The firewall device must never be accessible directly from the ____________________ network.

The ____________________ packet-filtering firewall can react to an emergent event and update or create rules to deal with that event.

Good firewall rules include denying all data that is not verifiably authentic.

A(n) ____________________ contains a computer chip that can verify and validate several pieces of information instead of just a PIN.

The static packet filtering firewall can react to an emergent event and update or create rules to deal with that event. _________________________

The dominant architecture used to secure network access today is the __________ firewall.

Good policy and practice dictates that each firewall device, whether a filtering router, bastion host, or other firewall implementation, must have its own set of configuration rules.

Most firewalls use packet header information to determine whether a specific packet should be allowed to pass through or should be dropped. _________________________

In __________ mode, the data within an IP packet is encrypted, but the header information is not.

Known as the ping service, ICMP is a(n) __________ and should be ___________.

The __________ is an intermediate area between a trusted network and an untrusted network.

A(n) ____________________ private network is a secure network connection between systems that uses the data communication capability of an unsecured and public network.

Best practices in firewall rule set configuration state that the firewall device never allows administrative access directly from the public network. _________________________