GoConqr has a new look! Let us know what you think.

Sign up free

Quiz

Quix8 - D5 - 50Q

Requiemdust Sheena 50 questions 3.0 (1 rating)

Take the quiz

Questions in this quiz (50)

  1. 1Chris is the identity architect for a growing e-commerce website
    that wants to leverage social identity. To do this, he and his team
    intend to allow users to use their existing Google accounts as their
    primary accounts when using the e-commerce site. This means
    that when a new user initially connects to the e-commerce
    platform, they are given the choice between using their Google
    account using OAuth 2.0 or creating a new account on the platform
    using their own email address and a password of their choice.

    When the e-commerce application creates an account for a Google
    user, where should that user’s password be stored?    Image for question 1
    1. AA. The password is stored in the e-commerce application’s database.
    2. BB. The password is stored in memory on the e-commerce
      application’s server.
    3. CC. The password is stored in Google’s account management system.
    4. DD. The password is never stored; instead, a salted hash is stored in
      Google’s account management system.
  2. 2Chris is the identity architect for a growing e-commerce website
    that wants to leverage social identity. To do this, he and his team
    intend to allow users to use their existing Google accounts as their
    primary accounts when using the e-commerce site. This means
    that when a new user initially connects to the e-commerce
    platform, they are given the choice between using their Google
    account using OAuth 2.0 or creating a new account on the platform
    using their own email address and a password of their choice.

    Which system or systems is/are responsible for user authentication for
    Google users?    Image for question 2
    1. AA. The e-commerce application.
    2. BB. Both the e-commerce application and Google servers.
    3. CC. Google servers.
    4. DD. The diagram does not provide enough information to determine
      this.
  3. 3What type of attack is the creation and exchange of state tokens
    intended to prevent?    Image for question 3
    1. AA. XSS
    2. BB. CSRF
    3. CC. SQL injection
    4. DD. XACML
  4. 4Questions like “What is your pet’s name?” are examples of what type
    of identity proofing?
    1. AA. Knowledge-based authentication
    2. BB. Dynamic knowledge-based authentication
    3. CC. Out-of-band identity proofing
    4. DD. A Type 3 authentication factor
  5. 5Lauren builds a table that includes assigned privileges, objects, and
    subjects to manage access control for the systems she is responsible
    for. Each time a subject attempts to access an object, the systems
    check the table to ensure that the subject has the appropriate rights to
    the objects. What type of access control system is Lauren using?
    1. AA. A capability table
    2. BB. An access control list
    3. CC. An access control matrix
    4. DD. A subject/object rights management system
  6. 6During a review of support incidents, Ben’s organization discovered
    that password changes accounted for more than a quarter of its help
    desk’s cases. Which of the following options would be most likely to
    decrease that number significantly?
    1. AA. Two-factor authentication
    2. BB. Biometric authentication
    3. CC. Self-service password reset
    4. DD. Passphrases
  7. 7Brian’s large organization has used RADIUS for AAA services for its
    network devices for years and has recently become aware of security
    issues with the unencrypted information transferred during
    authentication. How should Brian implement encryption for RADIUS?
    1. AA. Use the built-in encryption in RADIUS.
    2. BB. Implement RADIUS over its native UDP using TLS for protection.
    3. CC. Implement RADIUS over TCP using TLS for protection.
    4. DD. Use an AES256 pre-shared cipher between devices.
  8. 8Jim wants to allow cloud-based applications to act on his behalf to
    access information from other sites. Which of the following tools can
    allow that?
    1. AA. Kerberos
    2. BB. OAuth
    3. CC. OpenID
    4. DD. LDAP
  9. 9Ben’s organization has had an issue with unauthorized access to
    applications and workstations during the lunch hour when employees
    aren’t at their desk. What are the best types of session management
    solutions for Ben to recommend to help prevent this type of access?
    1. AA. Use session IDs for all access and verify system IP addresses of all
      workstations.
    2. BB. Set session time-outs for applications and use password-protected
      screensavers with inactivity time-outs on workstations.
    3. CC. Use session IDs for all applications, and use password protected
      screensavers with inactivity time-outs on workstations.
    4. DD. Set session time-outs for applications and verify system IP
      addresses of all workstations.
  10. 10The financial services company that Susan works for provides a web
    portal for its users. When users need to verify their identity, the
    company uses information from third-party sources to ask questions
    based on their past credit reports, such as “Which of the following
    streets did you live on in 2007?” What process is Susan’s organization
    using?
    1. AA. Identity proofing
    2. BB. Password verification
    3. CC. Authenticating with Type 2 authentication factor
    4. DD. Out-of-band identity proofing

Information

Description
Good Luck!
Language
English
Views
349
Rating
3.0 out of 5 · 1 rating
Rate this quiz
Rate this quiz

Feedback

What is it about?

What do you think of the new look?

How do you like it?