GoConqr has a new look! Let us know what you think.

Sign up free

Quiz

Authentication and Authorization

Carlos Veliz 10 questions

Take the quiz

Questions in this quiz (10)

  1. 1Which of the following statements is not part of the types of authentication mechanisms?
    1. AHTTP Basic Authentication
    2. BForm-Based Authentication
    3. CAuthentication 802.1x
    4. DClient/Server Mutual Authentication
  2. 2Cual de los siguientes enunciados no corresponde a los pasos de una autenticación basica?
    1. ARequests a protected resource
    2. BRequest username password
    3. CRedirect to login page
    4. DReturns request resource
    5. ESends username password
  3. 3Indicate whether the following definition is true or false for form-based authentication:
    "SSL can be added to part or whole of the web application"
    1. ATrue
    2. BFalse
  4. 4It is not part of the job overview of Kerberos:
    1. AKey Distribution Centre in Kerberos stores account information and client passwords
    2. BWorking proccess is invisible to the user
    3. CThis mechanism issues tickets containing user identity, encrypted password, encrypted data
    4. DClient authentication ensures that the users are legitimate or not
  5. 5It is not a way to prevent Web-based enumeration attack:
    1. ALock out targeted account access after a certain restricted failed attempts
    2. BWeb applications need to respond with similar error messages to all authentication failures
    3. CAnalyze URLs and ther responses during security testinf to authentication failures and prevent unnecessary information leakage
    4. DAnalyze Web page titles and their responses during authentication failures and prevent unnecesaary information leakage
  6. 6Authorization is the proccess that control access rights of principals to system resources that include:
    1. AAccess to users
    2. BAccess to proccess
    3. CAccess to machines
    4. DAll of the above
    5. ENone of the above
  7. 7Which is the fifth step in implementing authorization?
    1. ADefining roles to users
    2. Bcheck for user authentication for the application
    3. CApply the constrains which are accessible by role
    4. DDefine security roles of an application to roles defined in memory realm
  8. 8It is not part of the access control model:
    1. ASystem Domain
    2. BAWT
    3. CPrinter
    4. DDatabase Server
    5. EFile I/O
  9. 9Which of the following statements is not part of the principles of least privilege?
    1. AUser account should have enongh privileges according to their task
    2. BEvaluate and implement code access permissions
    3. CSave sensitive files with random names and clean temporay files
    4. DEnable web applications access to database through limited accounts only
    5. EAvoid Web application servers running at privileged accounst such as administrador, root, sysman, sa, etc.
  10. 10Which of the following is not a best practice in the management of sessions?
    1. AMake use of SSL
    2. BDo not add sensitive data in security token
    3. CImpose concurrent login limits
    4. DRegenerate session IDs upon privilege changes
    5. EA user has access to resources based on the role assigned

Information

Description
Authentication and Authorization
Language
Español
Views
216
Rating
No ratings yet
Rate this quiz
Rate this quiz

Feedback

What is it about?

What do you think of the new look?

How do you like it?