GoConqr has a new look! Let us know what you think.

Sign up free

Flashcards

Day 4 - Logon and Authentication

jeriel.juarbe Mod 7.1 Windows College English 48 cards

Cards in this deck (48)

  1. 1CTL + ALT + DEL =?SAS- Secure Attention Sequence
  2. 2Does msgina.dll belongs to the winlogon.exe?YES
  3. 3This is the process of proving that you are who you are...Authentication
  4. 4The GINA is responsible for processing ____ events and activating the ____ shellSAS
    user's (explorer.exe)
  5. 5This is a DLL module that operates in the security context of winlogon (Access token).GINA
  6. 6TERM: is a protected security subsystem that helps create secure user interactions in windows.LSA (lsass.exe)
  7. 7True or False: Authentication packages, the SAM, and Active Directory all run in the security context of LSATRUE
  8. 8Windows uses what 2 Authentication packages for interactive logons (hint: related to LSA)?1) Kerberos (kerberos.exe)
    2) LAN Manager (LM or NTLM )
  9. 9samlib.dll =?SAM
  10. 10This stores domain account info on domain controllers?Active Directory
  11. 11what/who generates tokens that contain user and group info?LSA
  12. 12What is an Interactive logon?1) first type, either domain or local computer.
    2) first step in authentication and authorization
  13. 13What type of logon is described below? -occurs on local machine -NTLM is used to authenticateLocal Logon
  14. 14What type of logon is described below? -logs onto the network using credentials stored in AD -kerberos is used to authenticateDomain Logon
  15. 15What must also be authenticated when logging onto a domain?The computer
  16. 16What type of logon is described below? -used after a user, service, or computer authentication takes place -alternate credentials may be required -mostly transparent to the user -peer to peer (workgroup)Network Logon
  17. 17What type of logon is described below? -occurs when the service account is validatedd or authenticated -local system account -network service account -local service accountService Logon
  18. 18msv1_0.dll =?LAN Manager (LM)
  19. 19What allows you to run a process under different credentials (GUI or Cmd)runas
  20. 20What is being described below? -password limited to 14 char -password converted to uppercase -divided into 7 char hashes -no timestampsLAN Manager LM
  21. 21What is being described below? -password can be up to 127 char -password case sensitive, special char, #'s -uses a better algorithm -uses timestampsNTLM
  22. 22What is being described below? -used for domain logons -open standard -uses port 88 -uses tickets (TGT, ST) supports mutual authenticationKERBEROS
  23. 23Term Mania for Kerberos: this is normally located in the domain controller and contains AS and TGS?KDC- Key Distribution Center
  24. 24Term Mania for Kerberos: generates Ticket Granting Ticket (TGT)Authentication Service (AS)
  25. 25Term Mania for Kerberos: this generates Service Tickects (ST)Ticket Granting Service (TGS)
  26. 26Term Mania for Kerberos: this is a authentication ticketTicket Granting Ticket (TGT)
  27. 27Term Mania for Kerberos: this is used to authenticate to the service or resourceService Ticket (ST)
  28. 28Term Mania for Kerberos: this used to encrypt and decrypt messagesSession Key (SK)
  29. 29Term Mania for Kerberos: KDC's account in Active directory and is used to encrypt TGT'skrbtgt Account
  30. 30What 2 services does the KDC host?AS and TGS
  31. 31What is the result of the Authentication Service (AS) exchange?gives the client a Ticket Granting Ticket (TGT)/SK
  32. 32What is the result of the TGS exchange?client gets a Service Ticket (ST)/SK
  33. 33what file is the kerberos client service?kerberos.dll
  34. 34Which component generates the access token during a domain logon?the local lsass.exe
  35. 35What is the following describing? The security context of the user account associated with the process or thread.Primary Access Token
    (thread uses parent processes access token)
  36. 36Explain an impersonation tokenThe server temporarily adopts the security profile of the client making the request.
  37. 37Explain security context.Access token that contains the user's SID, group SID, and privileges associated with the process
  38. 38The following is describing what: -unique -issued by authority -created/issued when account is created -will not be reused or transferred -will not change even if account is renamedSecurity Identifier (SID)
  39. 39In regards to the SID, what does this authority value represent: 5?Windows Authority
  40. 40In regards to the SID, what type is Relative ID (RID) with a value >1000?ordinary User Account
  41. 41In regards to the SID, what type is RID with a value of 18?Local System
  42. 42In regards to the SID, what type is RID with a value of 19?Local service
  43. 43In regards to the SID, what type is RID with a value of 20?Network Service
  44. 44In regards to the SID, what type is RID with a value of 500?ADMIN
  45. 45In regards to the SID, what type is RID with a value of 501?Guest
  46. 46In regards to the SID, what does the sub-authority value identify?it identifies the LSA that generated the account
  47. 47True or False: SID's are important because the kernel uses them to verify whether the user is authorized the desired access right to resources.true
  48. 48Access Tokens are comprised of what 4 components?1) User ID
    2) Group SID
    3) Privileges
    4) Other Info

Information

Description
College Mod 7.1 Windows Flashcards on Day 4 - Logon and Authentication, created by jeriel.juarbe on 06/08/2014.
Created by
jeriel.juarbe
Views
15
Rating

Feedback

What is it about?

What do you think of the new look?

How do you like it?