Chapter 6

Which of the following is used for identification?

• Username

• Password

• Cognitive question

• PIN

Tags

S1

Which of the following principles is implemented in a mandatory access control model to determine object access by classification level?

• Clearance

• Separation of duties

• Principle of least privilege

• Need to Know

Tags

S1

Which access control model is based on assigning attributes to objects and using Boolean logic to grant access based on the attributes of the subject?

• Role-Based Access Control (RBAC)

• Attribute-Based Access Control (ABAC)

• Mandatory Access Control (MAC)

Tags

S1

A remote access user needs to gain access to resources on the server. Which of the following processes are performed by the remote access server to control access to resources?

• Authentication and authorization

• Identity proofing and authentication

• Authentication and accounting

Tags

S1

Which of the following are examples of Something You Have authentication controls? (Select two.)

• Handwriting analysis

• PIN

• Photo ID

• Voice recognition

• Smart card

Tags

S2

Which of the following is a password that relates to things that people know, such as a mother's maiden name or a pet's name?

• Passphrase

• One-time

• Cognitive

• Dynamic

Tags

S2

A smart card can be used to store all but which of the following items?

• Identification codes

• Biometric template original

• Digital signature

• Cryptography keys

Tags

S2

Which of the following are disadvantages of biometrics? (Select two.)

• They have the potential to produce numerous false negatives.

• When used alone, they are no more secure than a strong password.

• Biometric factors for identical twins are the same.

• They require time synchronization.

• They can be circumvented using a brute force attack.

Tags

S2

Which of the following objects identifies a set of users with similar access needs?

• Permissions

• DACL

• SACL

• Group

Tags

S3

Which of the following is used by Microsoft for auditing in order to identify past actions performed by users on an object?

• SACL

• Permissions

• DACL

• User rights

Tags

S3