Test Out

Front 1

A user copies files from her desktop computer to a USB flash device and puts the device in her pocket. Which security goals is most at risk

Back 1

Confidentiality

Front 2

Smart phones with cameras and internet capabilities pose a risk to which security goal

Back 2

Confidentiality

Front 3

By definition which security concept ensures that only authorized parties can access data?

Back 3

Confidentiality

Front 4

In this example what protection does the hashing activity provide

Back 4

Integrity

Front 5

Which of the following is an example of an internal threat

Back 5

A user accidentally deleted the new product designs

Front 6

What is the greatest threat to the confidentiality of data in most secure organizations

Back 6

USB devices

Front 7

Which of the following is the correct definition of a threat

Back 7

Any potential danger to the confidentiality, integrity, or availability of integrity, or availability of information or systems

Front 8

Example of vulnerability

Back 8

misconfigured server

Front 9

Not a valid concept to associate with integrity

Back 9

Control access to resources to prevent unwanted access

Front 10

When a cryptographic system is used to protect the confidentiality of data, what is protected

Back 10

Unauthorized users are prevented from viewing or accessing the resource

Front 11

By definition which security concept uses the ability to prove that a sender sent an encrypted message?

Back 11

Non-repudiation

Front 12

Which form of access control enforces security based on user identities and allows individual users to define access controls over owned resources

Back 12

DAC

Front 13

Which type of access control focuses on assigning privileges based on security clearance and data sensitivity

Back 13

MAC

Front 14

In which form of access control environment is access controlled by rules rather than by identity

Back 14

MAC

Front 15

You have implemented an access control method that allows only users who are managers to access specific data. Which type of access control model is used

Back 15

RBAC

Front 16

You have a system that allows the owner of a file to identify users and their permissions to the file. Which type of access control model is implemented?

Back 16

DAC

Front 17

Term for the process of validating a subjects identity

Back 17

authentication

Front 18

Used for identification

Back 18

Username

Front 19

A remote access user needs to gain access to resources on the server. Which of the process are performed by the remote access server to control access to resources

Back 19

Authentication and authorization

Front 20

Defines an object as used in access control

Back 20

data, applications, systems, networks, and physical space

Front 21

Access control model manages rights and permissions based on job descriptions and responsibilities

Back 21

Role based access control (RBAC)

Front 22

Which is the star property of Bell-LaPadula

Back 22

No write down

Front 23

The Clark-Wilson model is primarily based on

Back 23

Controlled intermediary access applications

Front 24

The Brewer-Nash model is designed to primarily to prevent

Back 24

conflicts of interest

Front 25

DAC manages access to resources using what primary element or aspect

Back 25

Identity

Front 26

What form of access control is based on job descriptions

Back 26

RBAC

Front 27

Example of two factor authentication

Back 27

token device

pin

Front 28

Example of three factor authentication

Back 28

token device

keystroke analysis

cognitive question

Front 29

Example of Type II authentication credentials

Back 29

Smart card

Photo ID

Front 30

Used to describe an event in which a person is denied access to a system when they should be allowed to enter

Back 30

False negative

Front 31

Defines crossoever rate for evaluating biometric systems

Back 31

The point where the number of false positives matches the number of false negatives in a biometric system

Front 32

Examples of SSO

Back 32

SESAME

Kerberos

Front 33

Stronger than any biometric authentication factor

Back 33

Two factor authentication

Front 34

A device which is synchronized to an authentication server uses which authentication type

Back 34

Synchronous token

Front 35

The mathematical algorithm used by HMAC-based One Time Passwords (HOTP) relies on two types of information to generate a new password based on the previously generated password.

Which info is used to generate the new password

Back 35

Shared secret

Counter

Front 36

The mathematical algorithm used to generate TOTP uses a shared secret and a counter to generate unique on time passwords. Which event causes the counter to increment when creating TOTP passwords

Back 36

Passage of time

Front 37

Which type of media prep is sufficient to media that will be reused in a different security context within your organization

Back 37

sanitization

Front 38

Which security principle prevents any one admin from having sufficient access to compromise the security of the overall IT solution

Back 38

Separation of duties

Front 39

You want to implement an ACL where only users you specifically authorize have access to the resource. Anyone not on list should be prevented from having access. Which of access list should be used

Back 39

Explicit allow, implicit deny

Front 40

Separation of duties is an example of which type of access control

Back 40

Preventive

Front 41

Within the /etc/security/limits.conf file you notice the following entry:

@guests hard maxlogins 3

What effect does the line have on the Linux system

Back 41

Limits the # of max logins from the guest group to three

Front 42

Methods for providing centralized authentication, authorization, and accounting for remote access

Back 42

TACACS+

RADIUS

Front 43

Have decided to implement a remote access solution that uses multiple remote access servers. You want to implement RADIUS to centralize remote access authentication and authorization

Back 43

Configure the remote access servers as RADIUS clients

Front 44

Characteristics of TACACS+

Back 44

Allows for possible 3 different servers, one each for authentication, authorization, and accounting

Uses TCP

Front 45

Differences between RADIUS and TACACS+

Back 45

Radius combines authentication and authorization into a single function; TACACS+ allows these services to be split between different servers

Front 46

Protocol that can be used to centralize remote access authentication

Back 46

TACACS

Front 47

RADIUS is primarily used for what

Back 47

Authenticating remote clients before access to network is granted

Front 48

Characteristic of TACACS+

Back 48

Encrypts entire packet, not just authentication packets

Front 49

Which port is used with TACACS

Back 49

49

Front 50

What does a remote access server use for authorization

Back 50

Remote access policies

Front 51

Best example of remote access authentication

Back 51

User establishes a dialup connection to a server to gain access to shared resources

Front 52

Feature of MS-CHAP v2 that is not included in CHAP

Back 52

Mutual authentication

Front 53

CHAP performs which of the following security functions

Back 53

Periodically verifies the identity of a peer using a three way handshake

Front 54

Which of the following authentication protocols transmits passwords in clear text, and is therefore considered too insecure for modern networks

Back 54

PAP

Front 55

Which remote access authentication protocol periodically and transparently re-authenticates during a logon session by default

Back 55

CHAP

Front 56

Which of the following authentication protocols uses a three way handshake to authenticate users to the network

Back 56

CHAP
MS-CHAP