Posts Tagged ‘Security+’

General Security Concepts

• Kerberos is an industry standard authentication protocol used to verify user or host identity.
• Role-based access control (RBAC) is an access control model. In this model, a user can access resources according to his role in the organization.
• Mandatory Access Control (MAC) is a model that uses a predefined set of access privileges for an object of the system.
• Authentication is a process of verifying the identity of a person, network host, or system process. The authentication process compares the provided credentials with the credentials stored in the database of an authentication server.
• Certificate-based authentication is the most secure method of authentication. It provides stronger key for encryption as compared to Digest authentication and sends encrypted passwords across the network. This prevents unauthorized users from intercepting the passwords.
• Anonymous authentication is generally used for public Internet Web sites. Using this method, a user can establish a connection with a Web server without providing username and password.
• Authentication is a process of verifying the identity of a person, network host, or system process. The authentication process compares the provided credentials with the credentials stored in the database of an authentication server.
• Password Authentication Protocol (PAP) transmits user credentials as plaintext.
• A certificate is a digital representation of information that identifies authorized users on the Internet and intranets.