CISSP Exam Cram, Third Edition

Chapter 3. Access Control Systems and Methodology

Terms you’ll need to understand

✓ Password types

✓ Mandatory access control (MAC)

✓ Discretionary access control (DAC)

✓ Role-based access control (RBAC)

✓ Single sign-on (SSO)

✓ Denial of service attack (DoS)

✓ Botnets

✓ Crossover error rate (CER)

✓ Zephyr chart

✓ Dictionary attack

✓ Brute-force attack

✓ Time/memory trade-off

Techniques you’ll need to master

✓ Understand access-control techniques

✓ Understand the methods of identification

✓ Describe the differences between discretionary, mandatory, and role-based access control

✓ Know the advantages of single sign-on technologies

✓ Understand the types of intrusion-detection systems

✓ Describe the two categories of intrusion-detection systems ...