Quiz
Sin título
Erstelle ein kostenloses Konto, um dieses Quiz zu beenden
Speichere deinen Fortschritt und sieh dir dein Endergebnis an.
oder mit deiner E-Mail registrieren
Schon ein Konto? Anmelden
Fragen in diesem Quiz (22)
1The Smartcard Operating System in in charge of:
- AManaging memory, follow a security architecture and establish a set of commands
- BAllowing booting up the card, sending an acoustic signal whenever the card is booted
- CManaging the communication between the card and the printer of the Point of Sale to which it is connected.
2One of the main targets of biometric recognition is:
- AImprove the human-machine interface, so that as the interaction is improved, the authentication mechanisms can be better followed, increasing comfort and, at the same time, security.
- BTo finish with terrorist attacks, in particular those related to airport security.
- CTo fully secure all the information system, as with the only use of biometrics, all the vulnerabilities of information systems are avoided.
3Chose the most correct definition. Digital Identity can be defined as:
- AA collection of preferences and credentials.
- BAttributes, credentials and identifiers.
- CPasswords, attributes and identifiers.
- DClaims about a subject issued by a third party.
4Chose the correct statement about Kerberos.
- AKerberos cannot be used for allowing users of one domain to access services in a different domain.
- BIn Kerberos basic version, a message of the type EKC[EKS[IC||IS]] is sent from the AS to client C (with identifier IC) to provide her with a ticket that will give access to service S (with identifier IS).
- CKerberos protocol flow implies automated sending of user passwords to all the different services inside a network in order to achieve SSO.
- DNone of the above is correct.
5OAuth 2.0…
- Adefines 3 entities: SP, IdP and user.
- Bprotocol flow includes an authentication step where an ID Token is exchanged between IdP and SP.
- CIs vulnerable to token stealing attacks if TLS encryption is not implemented.
- DIs an authentication protocol based on tokens
6Chose the correct statement:
- AUMA is a well-established IETF standard for cross-domain account provisioning and deprovisioning
- BThe goal of FIDO’s specifications is to improve current authentication in IdM systems, where username/password mechanisms are the dominant technology.
- CSCIM is an emerging IdM standard whose goal is to define a unified control point for authorization that is controlled and managed by the end-user.
- DAll the above are correct.
7Within the command-response structure of a smart card, which field is fully standardized without any possibility for proprietary values?
- ASW1
- BSW2
- CCLA
- DINS
8Vascular Biometrics …
- AUse infrared light to acquire the image of the region of interest
- BIs only applicable to hand palms
- CUse echography mechanisms to acquire the image of the region of interest
- DHas never been used as a commercial product (only as prototypes)
9Choose the correct statement:
- AOpenID defines three different entities (Identity provider, Relying party and End-user) but in the slang of the analysts we use other names (such as OpenID Provider, Service Provider or OpenID Consumer) which actually mean the same.
- BOpenID defines three different entities: Relying Party, Authorization Server and OpenID Authenticator.
- COpenID defines three different entities: Ticket Granting Server / Authentication Server, User and Service.
- DOpenID does not define the entities involved in a federated authentication, only the list of resources that a given Principal may access to.
10Choose the correct statement
- AIn Kerberos the TGT (Target Generation Ticket) is used to transfer the private key of the Principal
- BIn Kerberos the TGS issues ST (Service Tickets) for a Principal to be able to access a given Service.
- CIn Kerberos the TGT (Target Generation Ticket) is used to transfer the public key of the Principal.
- DIn Kerberos the TGS issues TGT for a Principal to be able to access the Auhtorization Server.
11What are the credentials of a user?
- AThe proof that the attributes of a given entity belong to such user.
- BThe password of the user
- CSomething the user knows, something the user has and something the user is
- DNone of the other answers is correct.
12Within the EMV payment system, the EMV card
- ACalculates always the certified signature of the transaction, no matter the card used
- BCalculates the certified signature of the transaction in the case of performing static authentication
- CIs only sending the Issuer PK Certificate and card details, in the case of performing a dynamic authentication
- DNone of the above
13El delegado de protección de datos:
- ADebe coincidir con el CISO si existe.
- BSupervisa el cumplimiento del RGPD.
- CDebe poseer una titulación técnica.
- DDebe coincidir con el responsable del tratamiento
14What does FNMR stands for?
- AThe rate of false negatives for a biometric authentication
- BFalse New Mated Rate
- CThe rate of false positives for a biometric authentication
- DFalse New Match Rate
15When an interface device sends a command to a smartcard, which is the minimum number of bytes that the card sends back to the interface device?
- A2
- B3
- C255
- DThere is not a general minimum number, as it will depend on the command sent.
16What is the TGT of Kerberos?
- AIt is the Ticket Granting Ticket. It is a ticket used to proove identity agains the TGS so itcan issue new tickets.
- BIt is the TarGeT. It is the field of the Identity token that contains the service that is being connected.
- CIt is the Time Granting Tracker. It is the field of the Ticket that keeps the time of the request to avoid replay attacks.
- DNone of the others are correct.
17OpenID Connect is an extension of OAuth for authentication. How does the IdP know that the Application is requesting for OIDC?
- AThe premise is false: OpenId Connect is not an extension of OAuth but an extension of plain OpenId.
- BThe premise is false: OpenId Connect is not an extension of OAuth but a concretion of plain OpenId.
- CThe IdP does not need to know it, it is up to the Application to use the provided token as either Authentication or Authorization.
- DThe client Application must set the scope to "openid"
18What of the following statements about HTTP Digest is correct
- AIt is a challenge-response authentication mechanism
- BThe response is a hash of the password of the user and the random nonce.
- CThe challenge can be reused, but it is not vulnerable to replay due to the nc
- DAll of the others are correct.
19What is "key stretching"?
- ASplitting the negotiated key in two to use half of it as session key
- BHashing the password of the user together with a salt, to avoid storing plain passwords in the database.
- CAn intentionally slow key expansion function.
- DNone of the others.
20What scope identifies that we are using Kerberos on top of OAuth?
- Aopenid
- Bkerbv5
- Ckerbv5-oauth
- DNone of the others
21What is the difference between Key Expansion and Key Stretching
- AKey Stretching is like Key Expansion with an intentionally slow algorithm.
- BKey Expansion creates a longer key, while Key Stretching creates a shorter key (usually, split the key in two to use each half for different purposes).
- CNothing, they are essentially synonyms.
- DKey Expansion use SHA1, while Key Stretching uses SHA2 or more modern
22Where are the passwords of Kerberos stored
- AIn the TGT and the ST
- BIn each of the computers (clients or servers), making it vulnerable to an attack of pass-the-hash
- CIn the AS (or more specifically, in the KDC).
- DKerberos forbit using passwords, using keys instead, so… the question itself does not make sense
Informationen
- Beschreibung
- Master Id & Auth Quiz am Sin título, erstellt von Elvira González am 23/05/2024.
- Autor
- Elvira González
- Sprache
- Español
- Aufrufe
- 2
- Schlagwörter
- Bewertung
- Noch keine Bewertungen Bewerte dieses Quiz