Ais Chapter 8

Front 1

Preventive Authentication

Back 1

verifies who a person is, something a person knows, something a person has, some biometric characteristic, combination of them

Front 2

Preventive authorization

Back 2

determines what a person can access

Front 3

Preventive access control matrix

Back 3

employee attempts to access a particular information system resource the system performs a compatibility test tath matches the user's authentication credentials against the access control matrix to determine whether theat employee should be allowed to access that resource and perform the requested action

Front 4

Preventive awareness training

Back 4

training all employees that access the system how to prevent leak of confidential information and social engineering

Front 5

Preventive biometrics

Back 5

finger print, eye scan, palm scan

Front 6

Preventive physical access controls

Back 6

locks, guards

Front 7

Preventive firewall

Back 7

software or hardware used to filter information

Front 8

Preventive intrusion detection system

Back 8

consists of a set of sensors and a central monitoring unit that creates logs of network traffic that was permitted to pass the firewall and then analyze those logs for signs of attempted or successful intrusions

Front 9

Preventive intrusion prevention system

Back 9

monitors patterns in the traffic flow, rather than only inspecting individual packets, to identify and automatically block attacks

Front 10

Detective log analysis

Back 10

process of examining logs to identify evidence of possible attacks

Front 11

Detective intrusion detection

Back 11

sensors and a central monitor unit that creates logs of network traffic that was permitted to pass the firewall and then analyze those logs for signs of attempted of successful intrusions

Front 12

Detective

Back 12

managerial reports, security testing

Front 13

corrective

Back 13

computer incident response team, chief information security officer, independent responsibility for information security assigned to someone at an appropriate senior level

Front 14

corrective patch management

Back 14

fix known vulnerabilities by installing the latest updates