AP®︎ Cybersecurity: Topic 4.2 Flashcards

The process of verifying that a user is who the user claims to be

A technical control that verifies a user's identity so only authorized users can access a system

Evidence a user supplies to prove identity, categorized as knowledge, possession, biometric, or location

A mathematical algorithm that converts binary data of arbitrary length into a fixed-length binary output

The fixed-length binary string produced by a cryptographic hash function

An n-bit hash has 2^n possible outputs

The result when two different inputs produce the same hash output

The property that makes it computationally difficult to find two different inputs with the same hash

The property that makes it computationally infeasible to determine an input that generated a given hash

The property that the same input processed by the same hash function always produces the same hash

The property that a particular hash function always produces the same number of output bits regardless of input size

A hash function no longer used in secure settings, usually because an efficient collision method exists; MD5 and SHA-1 are examples

Store a password's hash instead of its plaintext, then hash each entered password and compare the result with the stored hash

A unique random value combined with a user's password before hashing so identical passwords produce different stored hashes

An attack that submits username-and-password guesses to an active login portal, service, or device

An attack that tests candidate passwords against captured password hashes on the adversary's computer, bypassing account lockout

Trying one common password or a few common passwords across many different user accounts

Trying complete credentials stolen elsewhere or common default credentials against accounts, services, or devices

An automated offline attack that systematically tests every potential password in a chosen search space

An automated offline attack that tests a list of common or likely passwords instead of every possible string

A precomputed table associating potential passwords with their hash outputs, sorted by hash for searching

Searching a precomputed rainbow table for a captured hash to identify an associated password

Something the user knows, such as a password, PIN, or challenge-question answer

An object the user has, such as an access card, bank card, registered phone, or authentication token

A measured bodily feature, such as a fingerprint, face, iris, retina, palm print, or voice

Evidence of somewhere the user is, inferred from data such as Wi-Fi signals, GPS, time zone, or IP address

Authentication requiring at least two different factor categories, not merely two pieces of the same type of evidence

A login rule requiring characters from designated sets, commonly uppercase, lowercase, numeric, and special characters

A login rule requiring a password to contain at least a configured number of characters

The maximum time a password may remain in use before a change is required, though routine changes can encourage predictable patterns

A stored set of previous password hashes used to reject recently reused passwords

A setting that locks an account after a configured number of invalid login attempts, limiting online but not offline guessing