Quiz
5
Create a free account to finish this quiz
Save your progress and see your final score.
Already have an account? Sign in
Questions in this quiz (77)
1Which of the following is not one of the AAA controls?
- AAuthentication
- BAuditing
- CAccuracy
- DAuthorizations
2________ is the process of assessing the identity of each individual claiming to have permission to use a resource.
- AAuthorizations
- BAuthentication
- CAccuracy
- DAuditing
3________ is the process of assessing the identity of each individual claiming to have permission to use a resource.
- AAuthorizations
- BAuthentication
- CBoth A and B
- DNeither A nor B
4________ is the process of collecting information about the activities of each individual in log files for immediate and later analysis.
- AAuthorizations
- BAuthentication
- CAccuracy
- D Auditing
5Which of the following is one of the four bases for authentication credentials?
- AWhat you know
- BWhat you have
- CBoth A and B
- DNeither A nor B
6Two-factor authentication can be defeated if ________.
- Athe user's computer is compromised
- Bthe attacker uses a man-in-the-middle attack
- CBoth A and B
- DNeither A nor B
7Compared to access control based on individual accounts, RBAC is ________.
- Aless prone to error
- Bmore expensive
- CBoth A and B
- DNeither A nor B
8In the military, departments do not have the ability to alter access control rules set by higher authorities in ________.
- Apolicy-based access control
- Bmandatory access control
- Cdiscretionary access control
- Dmultilevel access control
9In ________ the department has discretion over giving access to individuals, within policy standards set by higher authorities.
- Apolicy-based access control
- Bmandatory access control
- Cdiscretionary access control
- D delegated access control
10In CobiT, entry must be ________.
- Ajustified
- Blogged
- C Both A and B
- DNeither A nor B
11On loading docks, outgoing shipments should be separated from incoming shipments ________.
- Ato ensure the segregation of duties
- Bto avoid confusion
- Cto reduce the risk of theft
- DAll of the above
12Which of the following is not one of the rules for working in secure areas?
- AUnsupervised work in secure areas should be avoided.
- BWhen no one is in a secure area, it should be locked and verified periodically.
- CNo one should be allowed to work in secure areas for more than four hours in a row.
- DElectronic devices that can record or copy mass amounts of information should be forbidden in secure areas.
13Which of the following should be forbidden in secure areas?
- A Cameras
- BUSB flash drives
- CBoth A and B
- DNeither A nor B
14________ can be used to supply power during long power outages.
- AUninterruptable power supplies
- BElectrical generators
- C Both A and B
- DNeither A nor B
15If a laptop needs to be taken off premises, ________.
- Ait should first be logged out.
- Bit should be logged in when returned
- Call sensitive information should be removed
- DAll of the above
16Buildings should be set back from streets and protected with rolling hill landscaping to reduce threats from ________.
- Awireless eavesdropping
- Bindustrial espionage
- Ccasual observation
- D terrorism
17________ is a social engineering trick where an intruder may follow an authorized user through a door that the authorized user opens with an access device.
- AShoulder surfing
- BShadowing
- CTrailing
- D Piggybacking
18Long passwords that use several types of keyboard characters are called ________
- Acomplex
- Breusable
- Cdictionary
- Done-time
19The book recommends that passwords be at least ________ characters long.
- A 6
- B8
- C20
- D100
20A ________ card is an access card that has a built-in microprocessor and memory.
- Amagnetic stripe
- Bsmart
- CBoth A and B
- DNeither A nor B
21A ________ card stores authentication data.
- Amagnetic stripe
- Bsmart
- CBoth A and B
- DNeither A nor B
22A ________ is a small device with a display that has a number that changes frequently.
- Aone-time-password token
- BUSB token
- Cmagnetic stripe card
- DNone of the above
23A ________ is a small device that plugs into a standard computer port to identify the owner.
- Ane-time-password token
- BUSB token
- Cmagnetic stripe card
- Dsmart card
24 A ________ does not require a special reader to be added to a PC for access control.
- AUSB token
- Bmagnetic stripe card
- Csmart card
- DAll of the above
25________ can be much shorter than ________.
- APINs, passwords
- BPasswords, PINs
- CThere is no general length difference between passwords and PINs.
- DNone of the above
26During enrollment, the scanner sends ________ to the authentication system.
- Ascan data
- Bkey features
- CBoth A and B
- DNeither A nor B
27The template is based on ________ generated during the enrollment scan.
- Ascan data
- Bkey features
- CBoth A and B
- DNeither A nor B
28In biometric, a match occurs when a ________ meets the decision criteria.
- Aset of key features
- Bmatch index
- CBoth A and B
- DNeither A nor B
29For computer access, a false ________ means that a legitimate user is denied access to a resource.
- Arejection
- Bacceptance
- CBoth A and B
- DNeither A nor B
30For watch lists of criminals, a false ________ means that an innocent person is identified as a criminal.
- Aacceptance
- Brejection
- CBoth A and B
- DNeither A nor B
31The verifier itself determines the identity of the supplicant in ________.
- Averification
- Bidentification
- CBoth A and B
- DNeither A nor B
32Which is more likely to generate a false acceptance?
- AVerification
- Bidentification
- CBoth verification and identification are equally likely to generate a false acceptance.
- DNone of the above
33________ is a form of identification that identifies a person as being a member of a group.
- ARBAC
- BWatch list matching
- CGroup ID matching
- DGroup acceptance
34When an attacker deliberately attempts to fool the system, this is called ________.
- Adeception
- Ba false acceptance
- Ca false rejection
- DAll of the above.
35Which of the following statements accurately describes fingerprint recognition?
- AFingerprint recognition scanners are very expensive.
- BFingerprint recognition is easily deceived.
- CFingerprint recognition is rarely used.
- DAll of the above
36Fingerprint recognition should be used as a security measure for access to ________.
- Aa non-essential supply cabinet
- Ba notebook containing sensitive information
- CBoth A and B
- DNeither A nor B
37 Iris recognition technology is ________ and ________.
- Aexpensive, has low FARs
- Bexpensive, has high FARs
- Cinexpensive, has low FARs
- Dinexpensive, has high FARs
38 Hand geometry recognition is used heavily for ________.
- APC access
- Bwatch list access
- Cdoor access
- Dserver access
39 The most widely used form of biometrics is ________.
- Aretinal scanning
- Biris scanning
- Cfingerprint scanning
- Dface recognition
40The strongest form of authentication is ________.
- Abiometrics
- Bcryptographic authentication
- Creusable passwords
- D smart cards
41A private key/public key pair is usually created by the ________.
- Aclient
- BPKI server
- C Both A and B
- DNeither A nor B
42CAs distribute public keys ________.
- A in digital certificates
- Bonly in ways using encryption for confidentiality
- C Both A and B
- DNeither A nor B
43In the context of PKI, ________ is the process of accepting public keys and providing new digital certificates to the users.
- Aprovisioning
- B reflection
- Ccoordination
- Dcertification
44The ________ authentication problem is that unless individuals are carefully vetted before being allowed in a system, imposters can simply enroll through social engineering.
- Acore
- Bprime
- Cfinal
- Dhuman
45Giving a user permissions to use a certain resource is ________.
- Aauthentication
- Bauthorization
- CBoth A and B
- DNeither A nor B
46Authorizations are also called ________.
- A permissions
- Bverifications
- CBoth A and B
- DNeither A nor B
47The principle of ________ states that each person should only get the permissions that he or she absolutely needs to do his or her job.
- Aappropriate authorizations
- Bleast permissions
- C minimization
- DAll of the above.
48If a firewall lacks the processing power to handle incoming traffic, it will drop any packets it cannot process. This is ________.
- Aa security failure
- Bfailing safely
- CBoth A and B
- DNeither A nor B
49________ record(s) and analyzes what a person or program actually did.
- AAuthentication
- BAuthorizations
- CAuditing
- DAll of the above
50 Which of the following statements is true about log files?
- ALog files should be read regularly.
- BExternal auditing should be conducted periodically.
- CAutomatic alerts should be established.
- DAll of the above
51 Which of the following is not one of the devices in RADIUS central authentication?
- AThe supplicant
- BThe verifier
- CThe authenticator
- DThe RADIUS central authentication server
52In Kerberos, the ________ is the supplicant's proof that it has already authenticated itself with the Kerberos Server.
- Aticket granting ticket
- Bservice ticket
- CBoth A and B
- DNeither A nor B
53In Kerberos, the ________ is an encrypted session key that only the verifier can decrypt
- Aticket granting ticket
- Bservice ticket
- CBoth A and B
- DNeither A nor B
54In Kerberos, the ________ is sent from the Kerberos server to the supplicant.
- Aticket granting ticket
- Bservice ticket
- CBoth A and B
- DNeither A nor B
55In Kerberos, the ________ is sent from the Kerberos server to the verifier.
- Aticket granting ticket
- Bservice ticket
- CBoth A and B
- DNeither A nor B
56In directory servers, information is organized ________.
- Ahierarchically
- Brhizomatically
- Crelationally
- DNone of the above
57In directory servers, ________.
- Athere can only be one O in a directory server
- Bthere can only be one OU in a directory serverc
- Cthere can only be one OU in a directory server
- DNeither A nor B
58Directory servers can hold information about ________.
- Apeople
- Bcomputers
- CBoth A and B
- Deither A nor B
59LDAP can be used ________.
- Ato update information in the directory server
- Bto retrieve data from the directory server
- CBoth A and B
- DNeither A nor B
60________ often get their authentication information from ________.
- ADirectory servers, central authentication servers
- BCentral authentication servers, metadirectory servers
- CCentral authentication servers, directory servers
- DMetadirectory servers, central authentication servers
61Microsoft's directory server product is ________.
- AKerberos
- BActive Directory
- C LDAP
- DMS Directory
62In Active Directory, a domain controller contains ________.
- Aa RADIUS authentication server program
- Ban Active Directory database
- CBoth A and B
- DNeither A nor B
63Replication between a domain controller in a child domain and a domain controller in its parent domain is ________.
- A total
- Bpartial
- Cnonexistent
- D intransitive
64 If Directory Server A trusts Directory Server B, Directory Server B trusts Directory Server C, and Directory Server A trusts Directory Server C, this is ________ trust.
- AMutual
- Bone-way
- CTransitive
- Dintransitive
65If Directory Server A trusts Directory Server Band Directory Server B trusts Directory Server A, this is ________ trust.
- Amutual
- BOne-way
- CTransitive
- DIntransitive
66Directory servers from different vendors are synchronized through ________.
- A LDAP
- B central authentication servers
- CAD servers
- DNone of the above
67________ servers synchronize directory servers from different vendors.
- A Synchronization
- BLDAP
- C Metadirectory
- DCentral authentication
68 In federated identity management, firms ________.
- Aquery one another's identity management databases
- B send assertions to one another
- CNeither A nor B
- DBoth A and B
69A(n) ________ is a statement from Firm A that Firm B should accept as true if Firm B trusts Firm A.
- A certification
- Bassertion
- Ccertificate
- Dattribute
70A security assertion may contain ________.
- Aauthenticity information
- Battributes, such as spending limits for purchasers
- CBoth A and B
- DNeither A nor B
71The standard for sending security assertions is ________.
- ALDAP
- BXML
- C SAML
- DNone of the above
72________ is the centralized policy based management of all information required for access to corporate systems by people, machines, programs, or other resources.
A) Directory service- ADirectory service
- BMeta-directory service
- CIdentity management
- DMeta-identity management
73Which of the following are benefits of using identity management?
- AReduced costs
- BCentralized auditing of all an employee's access permission across a firm
- CBoth A and B
- DNeither A nor B
74________ allows a user to authenticate him or herself to the identity management server once; thereafter, whenever the user asks for access to another server, no additional logins are required.
- ARSO
- BSSO
- CTSO
- DNone of the above
75________ is possible today.
- ASingle sign-on
- BReduced sign-on
- CBoth A and B
- DNeither A nor B
76A(n) ________ is the set of attributes about a person or resource that must be revealed in a particular context.
- Atemplate
- Bsubtemplate
- C identity
- DNone of the above
77Self-service identity management should be used to change a ________ in the identity database.
- Apassword
- Btelephone number
- CBoth A and B
- DNeither A nor B
Information
- Description
- Quiz on 5, created by Fonzirelli Lawso on 30/03/2015.
- Author
- Fonzirelli Lawso
- Language
- English
- Views
- 0
- Rating
- No ratings yet Rate this quiz