QUESTION 102 Which of the following access management concepts is associated with file permissions?

• A. Authentication
• B. Accounting
• C. Authorization
• D. Identification

QUESTION 177 Users from two organizations, each with its own PKI, need to begin working together on a joint project. Which of the following would allow the users of the separate PKIs to work together without connection errors?

• A. Trust model
• B. Stapling
• C. Intermediate CA
• D. Key Escrow

QUESTION 34 Which of the following BEST implements control diversity to reduce the risks associated with the authentication of employees into company resources?

• A. Enforcing the use of something you know and something you have for authentication
• B. Requiring employees to sign the company's password and acceptable use policies
• C. Implementing LDAP authentication for some systems and RADIUS authentication for others
• D. Publishing a password policy and enforcing password requirements via a GPO

QUESTION 40 The Chief Information Security Officer (CISO) of an organization has tasked the security analysis team with researching and developing a multifactor authentication alternative to the existing single-factor version. The team decides that multifactor, for this organization, will mean three separate and distinct authentication methods. Which of the following options BEST meets this requirement?

• A. Retina scan, blood sample, token
• B. Token, certificate, voice recognition
• C. Fingerprint, token, challenge question
• D. PIV, token, challenge question

QUESTION 6 Company A has acquired Company B. Company A has different domains spread globally, and typically migrates its acquisitions infrastructure under its own domain infrastructure. Company B, however, cannot be merged into Company A's domain infrastructure. Which of the following methods would allow the two companies to access one another's resources?

• A. Attestation
• B. Federation
• C. Single sign-on
• D. Kerberos

QUESTION 97 Which of the following access management concepts is MOST closely associated with the use of a password or PIN?

• A. Authorization
• B. Authentication
• C. Accounting
• D. Identification

QUESTION 136 A security analyst is mitigating a pass-the-hash vulnerability on a Windows infrastructure. Given the requirement, which of the following should the security analyst do to MINIMIZE the risk?

• A. Enable CHAP
• B. Disable NTLM
• C. Enable Kerberos
• D. Disable PAP

QUESTION 151 Which of the following uses tokens between the identity provider and the service provider to authenticate and authorize users to resources?

• A. RADIUS
• B. Kerberos
• C. OAuth
• D. MSCHAP

QUESTION 162 A company is deploying a file-sharing protocol across a network and needs to select a protocol for authenticating clients. Management requests that the service be configured in the most secure way possible. The protocol must also be capable of mutual authentication, and support SSO and smart card logons. Which of the following would BEST accomplish this task?

• A. Store credentials in LDAP.
• B. Use NTLM authentication.
• C. Implement Kerberos.
• D. Use MSCHAP authentication.

QUESTION 168 A systems administrator is configuring a new network for TACACS+ management and authentication. Which of the following must be configured to provide authentication between the switch and the TACACS+ server?

• A. 802.1X
• B. SSH
• C. Shared secret
• D. SNMPv3
• E. CHAP