Test
5
Crea una cuenta gratis para terminar este test
Guarda tu progreso y consulta tu resultado final.
¿Ya tienes cuenta? Inicia sesión
Preguntas del test (77)
1Which of the following is not one of the AAA controls?
- AAuthentication
- BAuditing
- CAccuracy
- DAuthorizations
2________ is the process of assessing the identity of each individual claiming to have permission to use a resource.
- AAuthorizations
- BAuthentication
- CAccuracy
- DAuditing
3________ is the process of assessing the identity of each individual claiming to have permission to use a resource.
- AAuthorizations
- BAuthentication
- CBoth A and B
- DNeither A nor B
4________ is the process of collecting information about the activities of each individual in log files for immediate and later analysis.
- AAuthorizations
- BAuthentication
- CAccuracy
- D Auditing
5Which of the following is one of the four bases for authentication credentials?
- AWhat you know
- BWhat you have
- CBoth A and B
- DNeither A nor B
6Two-factor authentication can be defeated if ________.
- Athe user's computer is compromised
- Bthe attacker uses a man-in-the-middle attack
- CBoth A and B
- DNeither A nor B
7Compared to access control based on individual accounts, RBAC is ________.
- Aless prone to error
- Bmore expensive
- CBoth A and B
- DNeither A nor B
8In the military, departments do not have the ability to alter access control rules set by higher authorities in ________.
- Apolicy-based access control
- Bmandatory access control
- Cdiscretionary access control
- Dmultilevel access control
9In ________ the department has discretion over giving access to individuals, within policy standards set by higher authorities.
- Apolicy-based access control
- Bmandatory access control
- Cdiscretionary access control
- D delegated access control
10In CobiT, entry must be ________.
- Ajustified
- Blogged
- C Both A and B
- DNeither A nor B
11On loading docks, outgoing shipments should be separated from incoming shipments ________.
- Ato ensure the segregation of duties
- Bto avoid confusion
- Cto reduce the risk of theft
- DAll of the above
12Which of the following is not one of the rules for working in secure areas?
- AUnsupervised work in secure areas should be avoided.
- BWhen no one is in a secure area, it should be locked and verified periodically.
- CNo one should be allowed to work in secure areas for more than four hours in a row.
- DElectronic devices that can record or copy mass amounts of information should be forbidden in secure areas.
13Which of the following should be forbidden in secure areas?
- A Cameras
- BUSB flash drives
- CBoth A and B
- DNeither A nor B
14________ can be used to supply power during long power outages.
- AUninterruptable power supplies
- BElectrical generators
- C Both A and B
- DNeither A nor B
15If a laptop needs to be taken off premises, ________.
- Ait should first be logged out.
- Bit should be logged in when returned
- Call sensitive information should be removed
- DAll of the above
16Buildings should be set back from streets and protected with rolling hill landscaping to reduce threats from ________.
- Awireless eavesdropping
- Bindustrial espionage
- Ccasual observation
- D terrorism
17________ is a social engineering trick where an intruder may follow an authorized user through a door that the authorized user opens with an access device.
- AShoulder surfing
- BShadowing
- CTrailing
- D Piggybacking
18Long passwords that use several types of keyboard characters are called ________
- Acomplex
- Breusable
- Cdictionary
- Done-time
19The book recommends that passwords be at least ________ characters long.
- A 6
- B8
- C20
- D100
20A ________ card is an access card that has a built-in microprocessor and memory.
- Amagnetic stripe
- Bsmart
- CBoth A and B
- DNeither A nor B
21A ________ card stores authentication data.
- Amagnetic stripe
- Bsmart
- CBoth A and B
- DNeither A nor B
22A ________ is a small device with a display that has a number that changes frequently.
- Aone-time-password token
- BUSB token
- Cmagnetic stripe card
- DNone of the above
23A ________ is a small device that plugs into a standard computer port to identify the owner.
- Ane-time-password token
- BUSB token
- Cmagnetic stripe card
- Dsmart card
24 A ________ does not require a special reader to be added to a PC for access control.
- AUSB token
- Bmagnetic stripe card
- Csmart card
- DAll of the above
25________ can be much shorter than ________.
- APINs, passwords
- BPasswords, PINs
- CThere is no general length difference between passwords and PINs.
- DNone of the above
26During enrollment, the scanner sends ________ to the authentication system.
- Ascan data
- Bkey features
- CBoth A and B
- DNeither A nor B
27The template is based on ________ generated during the enrollment scan.
- Ascan data
- Bkey features
- CBoth A and B
- DNeither A nor B
28In biometric, a match occurs when a ________ meets the decision criteria.
- Aset of key features
- Bmatch index
- CBoth A and B
- DNeither A nor B
29For computer access, a false ________ means that a legitimate user is denied access to a resource.
- Arejection
- Bacceptance
- CBoth A and B
- DNeither A nor B
30For watch lists of criminals, a false ________ means that an innocent person is identified as a criminal.
- Aacceptance
- Brejection
- CBoth A and B
- DNeither A nor B
31The verifier itself determines the identity of the supplicant in ________.
- Averification
- Bidentification
- CBoth A and B
- DNeither A nor B
32Which is more likely to generate a false acceptance?
- AVerification
- Bidentification
- CBoth verification and identification are equally likely to generate a false acceptance.
- DNone of the above
33________ is a form of identification that identifies a person as being a member of a group.
- ARBAC
- BWatch list matching
- CGroup ID matching
- DGroup acceptance
34When an attacker deliberately attempts to fool the system, this is called ________.
- Adeception
- Ba false acceptance
- Ca false rejection
- DAll of the above.
35Which of the following statements accurately describes fingerprint recognition?
- AFingerprint recognition scanners are very expensive.
- BFingerprint recognition is easily deceived.
- CFingerprint recognition is rarely used.
- DAll of the above
36Fingerprint recognition should be used as a security measure for access to ________.
- Aa non-essential supply cabinet
- Ba notebook containing sensitive information
- CBoth A and B
- DNeither A nor B
37 Iris recognition technology is ________ and ________.
- Aexpensive, has low FARs
- Bexpensive, has high FARs
- Cinexpensive, has low FARs
- Dinexpensive, has high FARs
38 Hand geometry recognition is used heavily for ________.
- APC access
- Bwatch list access
- Cdoor access
- Dserver access
39 The most widely used form of biometrics is ________.
- Aretinal scanning
- Biris scanning
- Cfingerprint scanning
- Dface recognition
40The strongest form of authentication is ________.
- Abiometrics
- Bcryptographic authentication
- Creusable passwords
- D smart cards
41A private key/public key pair is usually created by the ________.
- Aclient
- BPKI server
- C Both A and B
- DNeither A nor B
42CAs distribute public keys ________.
- A in digital certificates
- Bonly in ways using encryption for confidentiality
- C Both A and B
- DNeither A nor B
43In the context of PKI, ________ is the process of accepting public keys and providing new digital certificates to the users.
- Aprovisioning
- B reflection
- Ccoordination
- Dcertification
44The ________ authentication problem is that unless individuals are carefully vetted before being allowed in a system, imposters can simply enroll through social engineering.
- Acore
- Bprime
- Cfinal
- Dhuman
45Giving a user permissions to use a certain resource is ________.
- Aauthentication
- Bauthorization
- CBoth A and B
- DNeither A nor B
46Authorizations are also called ________.
- A permissions
- Bverifications
- CBoth A and B
- DNeither A nor B
47The principle of ________ states that each person should only get the permissions that he or she absolutely needs to do his or her job.
- Aappropriate authorizations
- Bleast permissions
- C minimization
- DAll of the above.
48If a firewall lacks the processing power to handle incoming traffic, it will drop any packets it cannot process. This is ________.
- Aa security failure
- Bfailing safely
- CBoth A and B
- DNeither A nor B
49________ record(s) and analyzes what a person or program actually did.
- AAuthentication
- BAuthorizations
- CAuditing
- DAll of the above
50 Which of the following statements is true about log files?
- ALog files should be read regularly.
- BExternal auditing should be conducted periodically.
- CAutomatic alerts should be established.
- DAll of the above
51 Which of the following is not one of the devices in RADIUS central authentication?
- AThe supplicant
- BThe verifier
- CThe authenticator
- DThe RADIUS central authentication server
52In Kerberos, the ________ is the supplicant's proof that it has already authenticated itself with the Kerberos Server.
- Aticket granting ticket
- Bservice ticket
- CBoth A and B
- DNeither A nor B
53In Kerberos, the ________ is an encrypted session key that only the verifier can decrypt
- Aticket granting ticket
- Bservice ticket
- CBoth A and B
- DNeither A nor B
54In Kerberos, the ________ is sent from the Kerberos server to the supplicant.
- Aticket granting ticket
- Bservice ticket
- CBoth A and B
- DNeither A nor B
55In Kerberos, the ________ is sent from the Kerberos server to the verifier.
- Aticket granting ticket
- Bservice ticket
- CBoth A and B
- DNeither A nor B
56In directory servers, information is organized ________.
- Ahierarchically
- Brhizomatically
- Crelationally
- DNone of the above
57In directory servers, ________.
- Athere can only be one O in a directory server
- Bthere can only be one OU in a directory serverc
- Cthere can only be one OU in a directory server
- DNeither A nor B
58Directory servers can hold information about ________.
- Apeople
- Bcomputers
- CBoth A and B
- Deither A nor B
59LDAP can be used ________.
- Ato update information in the directory server
- Bto retrieve data from the directory server
- CBoth A and B
- DNeither A nor B
60________ often get their authentication information from ________.
- ADirectory servers, central authentication servers
- BCentral authentication servers, metadirectory servers
- CCentral authentication servers, directory servers
- DMetadirectory servers, central authentication servers
61Microsoft's directory server product is ________.
- AKerberos
- BActive Directory
- C LDAP
- DMS Directory
62In Active Directory, a domain controller contains ________.
- Aa RADIUS authentication server program
- Ban Active Directory database
- CBoth A and B
- DNeither A nor B
63Replication between a domain controller in a child domain and a domain controller in its parent domain is ________.
- A total
- Bpartial
- Cnonexistent
- D intransitive
64 If Directory Server A trusts Directory Server B, Directory Server B trusts Directory Server C, and Directory Server A trusts Directory Server C, this is ________ trust.
- AMutual
- Bone-way
- CTransitive
- Dintransitive
65If Directory Server A trusts Directory Server Band Directory Server B trusts Directory Server A, this is ________ trust.
- Amutual
- BOne-way
- CTransitive
- DIntransitive
66Directory servers from different vendors are synchronized through ________.
- A LDAP
- B central authentication servers
- CAD servers
- DNone of the above
67________ servers synchronize directory servers from different vendors.
- A Synchronization
- BLDAP
- C Metadirectory
- DCentral authentication
68 In federated identity management, firms ________.
- Aquery one another's identity management databases
- B send assertions to one another
- CNeither A nor B
- DBoth A and B
69A(n) ________ is a statement from Firm A that Firm B should accept as true if Firm B trusts Firm A.
- A certification
- Bassertion
- Ccertificate
- Dattribute
70A security assertion may contain ________.
- Aauthenticity information
- Battributes, such as spending limits for purchasers
- CBoth A and B
- DNeither A nor B
71The standard for sending security assertions is ________.
- ALDAP
- BXML
- C SAML
- DNone of the above
72________ is the centralized policy based management of all information required for access to corporate systems by people, machines, programs, or other resources.
A) Directory service- ADirectory service
- BMeta-directory service
- CIdentity management
- DMeta-identity management
73Which of the following are benefits of using identity management?
- AReduced costs
- BCentralized auditing of all an employee's access permission across a firm
- CBoth A and B
- DNeither A nor B
74________ allows a user to authenticate him or herself to the identity management server once; thereafter, whenever the user asks for access to another server, no additional logins are required.
- ARSO
- BSSO
- CTSO
- DNone of the above
75________ is possible today.
- ASingle sign-on
- BReduced sign-on
- CBoth A and B
- DNeither A nor B
76A(n) ________ is the set of attributes about a person or resource that must be revealed in a particular context.
- Atemplate
- Bsubtemplate
- C identity
- DNone of the above
77Self-service identity management should be used to change a ________ in the identity database.
- Apassword
- Btelephone number
- CBoth A and B
- DNeither A nor B
Información
- Descripción
- Test sobre 5, creado por Fonzirelli Lawso el 30/03/2015.
- Autor
- Fonzirelli Lawso
- Idioma
- English
- Visitas
- 0
- Valoración
- Aún sin valoraciones Valora este test