Sec+ Performing Account Management Based On Best – Flashcards
15 test answers
Unlock all answers in this set
Unlock answers 15question
Policy that prevents users from immediately changing a new password to another value. Can help prevent hackers from changing a user's password.
answer
Password minimum age
Unlock the answer
question
Allows an administrator to change the value of a user's password in the event that they forgotten theirs. This new value allows the user to log in and then immediately change it to another value that they can remember.
answer
Password Recovery
Unlock the answer
question
Occurs when a user is attempting to log in but giving incorrect values; necessary to prevent a would-be attacker from repeatedly guessing at password values until they find a match. Can be configured in the Local Security Policy or the Group Policy for a domain.
answer
Account lockout
Unlock the answer
question
When a system locks an account, the duration before the account is unlocked, ranging from 0 (must be explicitly unlocked by admin) to 99,999 minutes.
answer
Account Lockout Duration
Unlock the answer
question
This setting determines how many incorrect attempts a user can give before the account is locked. Ranges from 0 (no lockout) to 999 failed attempts.
answer
Account Lockout Threshold
Unlock the answer
question
This value specifies the number of minutes to wait between counting failed login attempts that are part of the same batch of attempts. Values range from 0 to 99,999 minutes, and must be set with Account Lockout Threshold.
answer
Reset Account Lockout Counter After
Unlock the answer
question
Avoid using shared accounts with generic or no passwords (guest accounts and anonymous accounts). Shared passwords are more difficult to secure and the accounts accessed by multiple users are difficult to audit.
answer
Generic account prohibition
Unlock the answer
question
Privileges acquired as a result of belonging to a group, includes role-based access control (RBAC).
answer
Group-based privileges
Unlock the answer
question
Privileges that can be assigned by the user, includes discretionary access control (DAC).
answer
User-assigned Privileges
Unlock the answer
question
An ongoing audit of what resources a user actually accesses, critical for stop- ping insider threats.
answer
Continuous monitoring
Unlock the answer
question
A process to determine whether a user's access level is still appropriate, closely related to the concept of least privileges.
answer
User access review
Unlock the answer
