EOC Quick Review

Which concept determines what resources users can access after they log on?

• authentication
• auditing
• access control
• defense in depth

What is used to provide protection when one line of defense is breached?

• defense in depth
• attack surface
• principle of least privilege
• risk mitigation

What is used to identify a person before giving access?

• authentication
• encryption
• access control
• auditing

What is a physical or logical device used to capture keystrokes?

• USB flash drive
• PDA
• Smartphone
• keylogger

In dealing with risks, which response is done by buying insurance to protect your bottom line if such a disaster or threat is realized?

• risk avoidance

• risk acceptance

• risk mitigation

• risk transfer

What do you call the process in which a user is identified via a username and password?

• authentication
• authorization
• accounting
• auditing

What process prevents someone from denying that she accessed a resource?

• accounting
• authorization
• sniffing
• nonrepudiation

Which of the following is a secret numeric password used for authentication?

• security token
• digital certificate
• digital signature
• PIN

What type of electronic document contains a public key?

• digital certificate
• biometrics
• PIN
• PAN

What type of authentication method identifies and recognizes people based on physical traits such as fingerprints?

• digital certificates
• WEP
• biometrics
• RADIUS