Exam 16: Network Access Control and Cloud Security

___________ includes people,processes,and systems that are used to manage access to enterprise resources by assuring that the identity of an entity is verified,and then granting the correct level of access based on this assured identity.

A _________ is an entity at one end of a point-to-point LAN segment that seeks to be authenticated by an autheticator attached to the other end of that link.

A network access server does not include its own authentication services.

With a ________ infrastructure,the cloud infrastructure is a composition of two or more clouds that remain unique entities but are bound together by standardized or proprietary technology that enables data and application portability.

NIST defines three service models,which can be viewed as nested service alternatives: software as a service,platform as a service,and _________ as a service.

Data must be secured while at rest,in transit,and in use,and access to the data must be controlled.

The NIST cloud computing reference architecture focuses on the requirements of "what" cloud services provide,not a "how to" design solution and implementation.

The threat of data compromise decreases in the cloud.

A ________ is a person,organization,or entity responsible for making a service available to interested parties.

A _________ is a person or organization that maintains a business relationship with,and uses service from,cloud providers.

With a _________ infrastructure,the cloud infrastructure is shared by several organizations and supports a specific community that has shared concerns.

For many clients,the most devastating impact from a security breach is the loss or leakage of data.

_________ is a model for enabling ubiquitous,convenient,on-demand network access to a shared pool of configurable computing resources that can be rapidly provisioned and released with minimal management effort or service provider interaction.

An __________ is a server computer that negotiates the use of a specific EAP method with an EAP peer,validates the EAP peer's credentials,and authorizes access to the network.

_________ is a client computer that is attempting to access a network.

The __________ determines what access should be granted.

With a _________ infrastructure,the cloud infrastructure is made available to the general public or a large industry group and is owned by an organization selling cloud services.

There is a decreasing trend in organizations to move information technology operations to a cloud computing infrastructure.

____________ is an EAP method for mutual authentication and session key derivation using a Pre-Shared Key.

The _________ is the node that is attempting to access the network and may be any device that is managed by the network access control system.