Quiz 5

Front 1

Which one of the following is an example of a logical access control?

Back 1

Password.

Hint 1

-Key for a lock.

-Password.

-Access Card.

-Fence.

Front 2

During which phase of the access control process does the system answer the question, "What can the requester access?"

Back 2

Authorization.

Hint 2

-Identification.

-Authentication.

-Authorization.

-Accountability.

Front 3

The __________ is the central part of a computing environment's hardware, software, and firmware that enforces access control.

Back 3

Security Kernel.

Hint 3

- Security Kernel.

- CPU.

- Memory.

-Co-Processor.

Front 4

Which type of authentication includes smart cards?

Back 4

Ownership.

Hint 4

- Knowledge.

- Ownership.

- Location.

- Action.

Front 5

Which one of the following in an example of two-factor authentication?

Back 5

Smart card and personal identification number (PIN).

Hint 5

-Smart card and personal identification number (PIN).

- Personal identification number (PIN) and password.

- Password and security questions.

- Token and smart card.

Front 6

Which type of password attack attempts all possible combinations of a password in an attempt to guess the correct value?

Back 6

Brute-force attack.

Hint 6

- Dictionary attack.

- Rainbow table attack.

- Social engineering attack.

- Brute-force attack.

Front 7

Which one of the following is NOT a commonly accepted best practice for password security?

Back 7

Use at least six alphanumeric characters.

Hint 7

- Use at least six alphanumeric characters.

-Do not include usernames in passwords.

- Include a special character in passwords.

- Include a mixture of uppercase characters, lowercase characters, and numbers in passwords.

Front 8

Which characteristic of a biometric system measures the system's accuracy using a balance of different error types?

Back 8

Crossover Error Rate (CER).

Hint 8

- False Acceptance Rate (FAR).

- False Rejection Rate (FRR).

- Crossover Error Rate (CER).

- Reaction Time.

Front 9

Alan is evaluating different biometric systems and is concerned that users might not want to subject themselves to retinal scans due to privacy concerns. Which characteristic of a biometric system is he considering?

Back 9

Acceptability.

Hint 9

- Accuracy.

- Reaction Time.

- Dynamism.

- Acceptability.

Front 10

Which one of the following is NOT an advantage of biometric systems?

Back 10

Physical characteristics may change.

Hint 10

- Biometrics require physical presence.

- Biometrics are hard to fake.

- Users do not need to remember anything.

- Physical Characteristics may change.

Front 11

What is a single sign-on (SSO) approach that relies upon the use of key distribution centers (KDC's) and ticket-granting servers (TGS's)?

Back 11

Kerberos.

Hint 11

- Secure European System for Applications in a Multi-Vendor Envrionment (SESAME).

- Lightweight Directory Access Protocol (LDAP).

- Security Assertion Markup Language (SAML).

- Kerberos.

Front 12

Which of the following is an example of a hardware security control?

Back 12

MAC Filtering.

Hint 12

- NTFS Permission.

- MAC Filtering.

- ID Badge.

- Security Policy.

Front 13

Gary would like to choose an access control model in which the owner of a resource decides who may modify permissions on that resource. Which model fits that scenario?

Back 13

Discretionary Access Control (DAC).

Hint 13

- Discretionary Access Control (DAC).

- Mandatory Access Control (MAC).

- Rule-based Access Control.

- Role-based Access Control (RBAC).

Front 14

Tomahawk Industries develops weapons control systems for the military. The company designed a system that requires two different officers to enter their access codes before allowing the system to engage. Which principle of security is this following?

Back 14

Separation Of Duties.

Hint 14

- Least Privilege.

- Security Through Obscurity.

- Need To Know.

- Separation Of Duties.

Front 15

Which security model does NOT protect the integrity of information?

Back 15

Bell-LaPadula.

Hint 15

- Bell-LaPadula.

- Clark-Wilson.

- Biba.

- Brewer and Nash.

Front 16

Which one of the following principles is NOT a component of the Biba integrity model?

Back 16

Subjects cannot change objects that have a lower integrity level.

Hint 16

- Subjects cannot read objects that have a lower level of integrity than the subject.

- Subjects cannot change objects that have a lower level integrity level.

- Subjects at a given integrity level can call up only subjects at the same integrity level or lower.

- A subject may not ask for service from subjects that have a higher integrity level.

Front 17

Which of the following does NOT offer authentication, authorization, and accounting (AAA) services?

Back 17

Redundant Array of Independent Disks (RAID).

Hint 17

- Remote Authentication Dial-In User Service (RADIUS).

- Terminal Access Controller Access Control System Plus (TACACS+).

- Redundant Array of Independent Disks (RAID).

- DIAMETER.

Front 18

What is an XML-based open standard for exchanging authentication and authorization information and is commonly used for web applications?

Back 18

Security Assertion Markup Language (SAML).

Hint 18

- Security Assertion Markup Language (SAML).

- Secure European System for Applications in a Multi-Vendor Environment (SESAME).

- User Datagram Protocol (UDP).

- Password Authentication Protocol (PAP).

Front 19

Which of the following is NOT a benefit of cloud computing to organizations?

Back 19

Lower Dependence On Outside Vendors.

Hint 19

- On-demand provisioning.

- Improved disaster recovery.

- No need to maintain a data center.

- Lower dependence on outside vendors.