Week 13 vocabulary deck
Security Controls and Device Hardening
Say the definition before you flip. Use the example and distinction to repair fuzzy terms, then take the separate vocabulary quiz.Vocabulary lab
Flip the idea, not just the card
Explain the term before you reveal the back. Then compare your explanation with the definition, example, and warning.
Read all terms without animation
- MFA
- Multi-factor authentication requires evidence from more than one authentication factor category. Example: A user signs in with a password and then approves a hardware or app-based factor. Do not confuse it with: Do not confuse MFA with two passwords; factors must come from different categories.
- least privilege
- Least privilege gives users and processes only the access needed to perform their approved tasks. Example: A student account cannot install system-wide software without authorization. Do not confuse it with: Do not confuse least privilege with blocking all access; required access is still granted.
- ACL
- An access control list defines which identities are allowed or denied specific permissions on a resource. Example: A folder ACL gives a support group read access but denies unauthorized modification. Do not confuse it with: Do not confuse an ACL with encryption; permissions and confidentiality are different controls.
- BitLocker
- BitLocker is Windows full-volume encryption used to protect data at rest. Example: A managed laptop encrypts its system volume and stores recovery information securely. Do not confuse it with: Do not confuse BitLocker with file permissions; encryption protects stored data differently.
- TPM
- A Trusted Platform Module can securely support cryptographic keys and measured-boot functions. Example: A Windows device uses its TPM as part of BitLocker key protection. Do not confuse it with: Do not confuse the TPM with the encryption algorithm itself.
- Secure Boot
- Secure Boot is a UEFI feature that helps prevent unauthorized boot software from loading. Example: A device verifies trusted boot components before starting the operating system. Do not confuse it with: Do not confuse Secure Boot with antivirus scanning after the OS loads.
- firewall
- A firewall enforces network traffic rules based on defined policy. Example: A host firewall blocks unsolicited inbound connections that are not required. Do not confuse it with: Do not confuse a firewall with antivirus; they control different attack surfaces.
- endpoint protection
- Endpoint protection is software and policy used to detect, block, or respond to threats on client devices. Example: A managed workstation receives malware protection and security policy updates. Do not confuse it with: Do not confuse endpoint protection with a network firewall alone.
- biometrics
- Biometric authentication uses measurable physical or behavioral characteristics as an identity factor. Example: A laptop uses fingerprint recognition as an authentication factor. Do not confuse it with: Do not confuse biometrics with a password; they are different factor types.
- account lockout
- Account lockout temporarily blocks or restricts authentication after defined failed attempts or policy triggers. Example: Repeated incorrect sign-ins trigger a timed lockout. Do not confuse it with: Do not confuse lockout with deleting the account.