Domain-04- Identity and Access Management

1. Jack is using smart cards for authentication. He is trying to classify the type of authentication for a report to his CIO. What type of authentication is Jack using?

• Type I

• Type II

• Type III

• Strong

You are selecting an authentication method for your company’s servers. You are looking for a method that periodically reauthenticates clients to prevent session hijacking. Which of the following would be your best choice?

• PAP

• SPAP

• CHAP

• OAUTH

Emiliano is working for a small company. His company is concerned about authentication and wants to implement biometrics using facial recognition and fingerprint scanning. How would this authentication be classified?

• Type I

• Type II

• Type III

• Strong

Lisa is setting up accounts for her company. She wants to set up accounts for the Oracle database server. Which of the following would be the best type of account to assign to the database service?

• User

• Guest

• Admin

• Service

You have been asked to select an authentication method that will support single sign-on, integrate with SAML, and work well over the Internet. Which of the following would be your best choice?

• Shibboleth

• OAUTH

• SPAP

• CHAP

Which authentication method was used as a native default for older versions of Microsoft Windows?

• PAP

• CHAP

• OAUTH

• NTLM

Carl has been asked to set up access control for a server. The requirements state that users at a lower privilege level should not be able to see or access files or data at a higher privilege level. What access control model would best fit these requirements?

• MAC

• DAC

• RBAC

• SAML

Clarice is concerned about an attacker getting information regarding network resources in her company. Which protocol should she implement that would be most helpful in mitigating this risk?

• LDAP

• TLS

• SNMP

• LDAPS

Ahmed is looking for an authentication protocol for his network. He is very concerned about highly skilled attackers. As part of mitigating that concern, he wants an authentication protocol that never actually transmits a user’s password, in any form. Which authentication protocol would be a good fit for Ahmed’s needs?

• CHAP

• Kerberos

• RBAC

• Type II

You work for a social media website. You wish to integrate your users’ accounts with other web resources. To do so, you need to allow authentication to be used across different domains, without exposing your users’ passwords to these other services. Which of the following would be most helpful in accomplishing this goal?

• Kerberos

• SAML

• OAUTH

• OpenID