Flashcards
Security+ Authentication
Flashcards do conjunto (19)
- 1Factorssomething you know
something you have
something you are - 2Attributessomewhere you are
something you can do
something you exhibit
someone you know - 3RADIUSUDP port 1812 - authentication/authorization
UDP port 1813 - accounting
encrypts authentication process but everything else is unencrypted - 4TACACS+TCP port 49
encrypts all traffic
SSO
Cisco proprietary - 5KerberosTCP/UDP port 88
used in Linux and Windows
AD uses this for AAA
uses KDC, AS, TGS, and TGT - 6OAuthindustry standard for authorizing applications to access user info without exposing sensitive info such as a password
- 7OpenID Connectauthentication protocol
works with OAuth - 8Digital Certificatesutilized for ID management and verification of service
ex: Smart or CAC cards - 9PAPsends cleartext passwords, deprecated
- 10CHAPutilizes a handshake between both ends to verify connectivity, mutual authentication
uses hashing to verify the challenge message, but still sends credentials in cleartext
periodically reauthenticates, protecting against MiTM and session hijacking
MS-CHAP encrypts all traffic - 11IEEE 802.1Xenterprise-wide centralized authentication system
controls connections to switches (with PNAC) and WAPs
utilizes EAP methods - 12EAPprovides a standard mechanism for negotiating authentication methods
vendors can write extensions
allows for multiple login methods such as smartcards, certificates, and Kerberos - 13EAP-TLSmutual authentication using digital certificates
uses TLS tunnel
used in wireless, WPA and WPA2 - 14EAP-TTLSEAP tunneled TLS
uses only a server-side certificate
can use any inner authentication protocol to authenticate once the tunnel is established - 15PEAPdesigned to provide an encrypted tunnel to securely pass credentials without needing a client-side certificate
uses either MS-CHAPv2 or EAP-GTC (generic token card) - 16LEAPCisco proprietary implementation of EAP
uses dynamic WEP keys that are changed and require frequent authentications between the RADIUS server and the client
widely used in wireless implementation for LANs - 17EAP-FASTEAP with Flexible Authentication via Secure Tunneling
uses secure tunnel and PAC (protected access credential) generated for each user from the master key assigned to the server
don't need to use a PKI
Cisco proprietary, upgrade to LEAP - 18SAMLbased on XML and is utilized to pass authorization credentials from identity management to ISPs
assists with web server SSO - 19PSKa client authentication method that uses a string of 64 hexadecimal digits, or a passphrase of 8-63 printable ASCII characters, to generate unique encryption keys for each wireless client
Informações
- Descrição
- CompTIA Information Technology (Security+ ) FlashCards sobre Security+ Authentication, criado por Lyndsay Badding em 28-04-2023.
- Criado por
- Lyndsay Badding
- Visualizações
- 7
- Tags
- Avaliação