Security+ (Sy0-401) Practice Test 11/12

Front 1

Password combined with PIN used as an authentication requirement is an example of:

Back 1

Something that the user knows

Front 2

Which of the following answers refers to a security measure providing protection against various password-based attacks, specifically password sniffing and replay attacks?

Back 2

OTP (One Time Password)

Front 3

What algorithm computes a one-time password from a shared secret key and the current time?

Back 3

TOTP

Front 4

Which of the following protocols transmits passwords over the network in an unecrypted form and is therefore considered unsecure?

Back 4

PAP

Front 5

Which part of the AAA framework deals with granting or denying access to resources?

Back 5

Authorization

Front 6

An access control model in which every resource has a sensitivity label matching a clearance level assigned to a user is known as:

Back 6

MAC (Mandatory Access Control)

Front 7

An access control model in which access to resources is granted or denied depending on Access Control List (ACL) entries is known as:

Back 7

Rule-Based Access Control

Front 8

Which of the following answers list the characteristic features of the Mandatory Access Control (MAC) model? (Select 3)

Back 8

- Users are not allowed to change access policies at their own discretion

- Labels and clearance levels can only be applied and changed by an administrator

- Every resource has a sensitivity label matching a clearance level assigned to a user

Front 9

Which of the following answers lists the most common access control model used in Trusted OS implementations?

Back 9

MAC

Front 10

One of the basic requirements of the Mandatory Access Control (MAC) model is that in order to be able to access a resource user's clearance level must be equal or higher than the sensitivity level assigned to the resource. (True / False)

Back 10

True

Front 11

Which of the following terms refers to an access control method based on the identity of subjects and/or groups to which they belong?

Back 11

DAC

Front 12

Which of the following answers refer to the Rule-Based Access Control (RBAC) model? (Select 2)

Back 12

- Implemented in network devices such as firewalls in order to control inbound and outbound traffic based on filtering rules

-Access to resources granted or denied depending on Access Control List (ACL) entries

Front 13

Which of the following access control models enforces the strictest set of access rules?

Back 13

MAC

Front 14

In computer security, biometrics refers to physical characteristics of the human body that can be used for identification and access control purposes.

Back 14

True

Front 15

Which part of the AAA framework incorporates the time-of-day restrictions requirement?

Back 15

Authorization

Front 16

Which of the following account policy settings forces users to come up with a new password every time they are required to change their old password?

Back 16

Password history

Front 17

Which of the following passwords is the most complex?

Back 17

T$7C52WL4SU , GdL3tU8wxYz , @TxBL$nW@Xt, G$L3tU8wY@z

Front 18

Which of the following account policies provides a countermeasure against malicious users attempting to determine an account password by trial and error?

Back 18

Account lockout

Front 19

The two factors that are considered important for creating strong passwords are:

Back 19

Password complexity / Password length

Front 20

The two basic techniques for encrypting information include symmetric encryption (also called public-key encryption) and asymmetric encryption. (also called secret-key encryption.)

(True / False)

Back 20

False

Front 21

In asymmetric encryption, any message encrypted with the use of the public key can only be decrypted by applying the same algorithm and the matching private key. (True / False)

Back 21

True

Front 22

Large amount of processing power required to both encrypt and decrypt the content of the message causes that symmetric-key encryption algorithms are much slower when compared to algorithms used in asymmetric encryption. (True / False)

Back 22

False

Front 23

A cryptographic key generated to be used only once within a short time frame is known as session key. (True / False)

Back 23

True

Front 24

In asymmetric encryption, data encrypted with the use of a private key can only be decrypted with the use of a matching public key.

(True / False)

Back 24

True

Front 25

Key exchange mechanism whereby the cryptographic key is being delivered over a different channel than the main communication channel (for example on a USB thumb drive) is an example of an in-band key exchange.

(True / False)

Back 25

False