Quiz
Chapter 12
Create a free account to finish this quiz
Save your progress and see your final score.
Already have an account? Sign in
Questions in this quiz (29)
1A user or a process functioning on behalf of the user that attempts to access an object is known as the:
- Asubject
- Breference monitor
- Centity
- Dlabel
2The action that is taken by a subject over an object is called a(n):
- Aauthorization
- Baccess
- Ccontrol
- Doperation
3What is the name for a predefined framework that can be used for controlling access, and is embedded into software and hardware?
- Aaccounting and access model
- Buser control model
- Caccess control model
- Dauthorization control model
4What access control model below is considered to be the most restrictive access control model, and involves assigning access controls to users strictly according to the custodian?
- AMandatory Access Control
- BRole Based Access Control
- CDiscretionary Access Control
- DRule Based Access Control
5Which access control model is considered to be the least restrictive?
- ARole Based Access Control
- BMandatory Access Control
- CRule Based Access Control
- DDiscretionary Access Control
6Which access control model that uses access based on a user's job function within an organization?
- ARole Based Access Control
- BRule Based Access Control
- CDiscretionary Access Control
- DMandatory Access Control
7Which access control model can dynamically assign roles to subjects based on a set of defined rules?
- ARole Based Access Control
- BMandatory Access Control
- CRule Based Access Control
- DDiscretionary Access Control
8When using Role Based Access Control (RBAC), permissions are assigned to which of the following?
- ARoles
- BGroups
- CLabels
- DUsers
9A vulnerable process that is divided between two or more individuals to prevent fraudulent application of the process is known as which of the following?
- Aseparation of duties
- Bprocess sharing
- Cmandatory splitting
- Drole reversal
10A list that specifies which subjects are allowed to access an object and what operations they can perform on it is referred to as a(n):
- AACE
- BDAC
- Centity
- DACL
11User accounts that remain active after an employee has left an organization are referred to as being what type of accounts?
- Aabandoned
- Bstale
- Corphaned
- Dinactive
12To assist with controlling orphaned and dormant accounts, what can be used to indicate when an account is no longer active?
- Apassword expiration
- Baccount expiration
- Clast login
- Daccount last used
13Although designed to support remote dial-in access to a corporate network, what service below is commonly used with 802.1x port security for both wired and wireless LANs?
- ARADIUS
- BICMP
- CFTP
- DTelnet
14During RADIUS authentication, what type of packet includes information such as identification of a specific AP that is sending the packet and the username and password?
- Aaccounting request
- Baccess request
- Cverification request
- Dauthentication request
15What authentication service commonly used on UNIX devices involves communicating user authentication information to a centralized server?
- ATACACS
- BRADIUS
- CKerberos
- DFTP
16Select the authentication system developed by the Massachusetts Institute of Technology (MIT) to verify the identity of network users.
- AAurora
- BKerberos
- CCHAP
- DTACACS
17The X.500 standard defines a protocol for a client application to access an X.500 directory known as which of the following options?
- ADIB
- BDAP
- CDIT
- DLDAP
18What kind of attack allows for the construction of LDAP statements based on user input statements, which can then be used to access the LDAP database or modify the database's information?
- ALDAP poisoning
- BKerberos injection
- CLDAP injection
- DDAP hijacking
19Which of the following is a simpler subset of Directory Access Protocol?
- ASDAP
- BX.500 Lite
- CDIB
- DADS
20When LDAP traffic is made secure by using Secure Sockets Layer (SSL) or Transport Layer Security (TLS), what is this process called?
- ASAML
- BLDAPS
- CTACACS
- DSDML
21Select the XML standard that allows secure web domains to exchange user authentication and authorization data and is used extensively for online e-commerce transactions.
- ASAML
- BLDAPS
- CTACACS
- DSDML
22What framework is used for transporting authentication protocols instead of the authentication protocol itself?
- ACHAP
- BSAML
- CEAP
- DMS-CHAP
23What standard provides a greater degree of security by implementing port-based authentication and blocks all traffic on a port-by-port basis until the client is authenticated using credentials stored on an authentication server?
- AIEEE 802.1a
- BIEEE 802.1x
- CLDAPS
- DTACACS
24Which of the following is a database stored on the network itself that contains information about users and network devices?
- Auser permissions
- Bnetwork service
- Csystem registry
- Ddirectory service
25What type of computer can forward RADIUS messages between RADIUS clients and RADIUS servers?
- Aintermediate proxy
- Bremote proxy
- CRADIUS proxy
- Dtranslation proxy
26Which of the following controls can be implemented so an organization can configure multiple computers by setting a single policy for enforcement?
- Agroup-based access control
- Bcomputer-based access control
- Crole-based access control
- Dsystem access control
27What is an entry in an ACL known as?
- ADACL
- BACE
- CSQL
- Dflag
28What policy is designed to ensure that all confidential or sensitive materials, either in paper form or electronic, are removed from a user's workspace and secured when the items not in use or when employees leave their workspace?
- Aclean workspace
- Bsecure workspace
- Cclean desk
- Dsecure desk
29What process periodically validates a user's account, access control, and membership role or inclusion in a specific group?
- Arecertification
- Brevalidation
- Ccontrol audit
- Dgroup auditing
Information
- Description
- Quiz on Chapter 12, created by Nitha Nitha on 26/11/2018.
- Author
- Nitha Nitha
- Language
- English
- Views
- 15
- Rating
- No ratings yet Rate this quiz