CYBER SECURITY UPDATED EXAMS SCRIPT
QUESTIONS AND ANSWERS SURE A+
✔✔Cognitive passwords - ✔✔Your mother's last name, 'matrix' or 'qwerty'. When a
person or password checker tries to guess the password, it will typically start with
common words.
✔✔CHAP - ✔✔The Challenge Handshake Authentication Protocol (CHAP) is an
authentication protocol that is primarily used for remote access PPP connections.
Replaced the Plain Authentication Protocol (PAP). CHAP uses a more secure method,
when a client wants to logon, the server sends a challenge request to the client, the
client replies with a challenge response which is a hashed (one-way encrypted) value
based on the username/password-combination and a random number. Vulnerable to
brute force and dictionary attacks.
✔✔Certificate - ✔✔An electronic document that typically contains a public key and
personal user information. Offer better security against brute-force or dictionary attacks
and password guessing than username/password-based authentication methods.
✔✔Certification Authority (CA) - ✔✔Issues certificates to entities such as users,
organizations, web sites and other CAs. As long as the CA can be considered a
trustworthy authority, the certificates (and the key and entity combination in it) issued by
it can be trusted as well.
, ✔✔EAP-TLS (Enhanced Authentication Protocol - Transport Layer Security) - ✔✔A
mutual authentication method, which means that both the client and the server prove
their identities to each other. During the EAP-TLS authentication process, the remote
access client sends its user certificate and the remote access server sends its computer
certificate.
✔✔Kerberos (Authentication) - ✔✔A fairly secure, but also complex and
comprehensive, authentication system, default in Windows, version 5.
There are three primary elements in a Kerberos system:
Client, which is the Kerberos client application representing a principal (computer or
user or software application).
Target server, provides the service the client wants to access.
Key Distribution Center (KDC), handles the distribution of keys and tickets.
✔✔Kerberos Process - ✔✔Authentication Service (AS) Exchange - When the client logs
on, the KDC issues a logon session key and a Ticket-Granting Ticket to the client, after
the KDC has verified the client's encrypted user credentials.
Ticket-Granting Service (TGS) Exchange - The client utilizes the TGT and the logon
session key to request a new session key and ticket to be used between the client and
the target server.
Client-Server (CS) Exchange - The client sends the new ticket, including the new
session key, to the target server to authenticate itself and to provide the target server
with the session key. Optionally, the target server uses the new session key to
authenticate itself to the client.
✔✔Single Sign On (SSO) - ✔✔Allows a user to logon only once and be able to access
all different resources in the network, such as e-mail, file servers, Intranet, etc. Attribute
of Kerberos.
✔✔Mutual authentication - ✔✔A client authenticates to a service, and the service
authenticates to the client, before any application traffic is exchanged. Can be
implemented using simple authentication protocols or more advanced solutions such as
Kerberos, commonly found in SSL (Secure Socket Layer) connections.
✔✔Biometrics - ✔✔Very secure type of authentication that uses anatomical and
physiological characteristics to authenticate a user, "something you are." Requires a lot
of storage, processing power, and appropriate conditions.
Ex: Finger print, voice, palm, retina, iris, facial, etc.
✔✔Tokens - ✔✔Software tokens are generated by the authenticating system when a
user logs on successfully, provide access to resources.
Hardware tokens, magnetic-strip cards and USB devices, contain a symmetric key that
is used for one-way hashing of a pin code or time stamp.
QUESTIONS AND ANSWERS SURE A+
✔✔Cognitive passwords - ✔✔Your mother's last name, 'matrix' or 'qwerty'. When a
person or password checker tries to guess the password, it will typically start with
common words.
✔✔CHAP - ✔✔The Challenge Handshake Authentication Protocol (CHAP) is an
authentication protocol that is primarily used for remote access PPP connections.
Replaced the Plain Authentication Protocol (PAP). CHAP uses a more secure method,
when a client wants to logon, the server sends a challenge request to the client, the
client replies with a challenge response which is a hashed (one-way encrypted) value
based on the username/password-combination and a random number. Vulnerable to
brute force and dictionary attacks.
✔✔Certificate - ✔✔An electronic document that typically contains a public key and
personal user information. Offer better security against brute-force or dictionary attacks
and password guessing than username/password-based authentication methods.
✔✔Certification Authority (CA) - ✔✔Issues certificates to entities such as users,
organizations, web sites and other CAs. As long as the CA can be considered a
trustworthy authority, the certificates (and the key and entity combination in it) issued by
it can be trusted as well.
, ✔✔EAP-TLS (Enhanced Authentication Protocol - Transport Layer Security) - ✔✔A
mutual authentication method, which means that both the client and the server prove
their identities to each other. During the EAP-TLS authentication process, the remote
access client sends its user certificate and the remote access server sends its computer
certificate.
✔✔Kerberos (Authentication) - ✔✔A fairly secure, but also complex and
comprehensive, authentication system, default in Windows, version 5.
There are three primary elements in a Kerberos system:
Client, which is the Kerberos client application representing a principal (computer or
user or software application).
Target server, provides the service the client wants to access.
Key Distribution Center (KDC), handles the distribution of keys and tickets.
✔✔Kerberos Process - ✔✔Authentication Service (AS) Exchange - When the client logs
on, the KDC issues a logon session key and a Ticket-Granting Ticket to the client, after
the KDC has verified the client's encrypted user credentials.
Ticket-Granting Service (TGS) Exchange - The client utilizes the TGT and the logon
session key to request a new session key and ticket to be used between the client and
the target server.
Client-Server (CS) Exchange - The client sends the new ticket, including the new
session key, to the target server to authenticate itself and to provide the target server
with the session key. Optionally, the target server uses the new session key to
authenticate itself to the client.
✔✔Single Sign On (SSO) - ✔✔Allows a user to logon only once and be able to access
all different resources in the network, such as e-mail, file servers, Intranet, etc. Attribute
of Kerberos.
✔✔Mutual authentication - ✔✔A client authenticates to a service, and the service
authenticates to the client, before any application traffic is exchanged. Can be
implemented using simple authentication protocols or more advanced solutions such as
Kerberos, commonly found in SSL (Secure Socket Layer) connections.
✔✔Biometrics - ✔✔Very secure type of authentication that uses anatomical and
physiological characteristics to authenticate a user, "something you are." Requires a lot
of storage, processing power, and appropriate conditions.
Ex: Finger print, voice, palm, retina, iris, facial, etc.
✔✔Tokens - ✔✔Software tokens are generated by the authenticating system when a
user logs on successfully, provide access to resources.
Hardware tokens, magnetic-strip cards and USB devices, contain a symmetric key that
is used for one-way hashing of a pin code or time stamp.
