Authentication and Authorization

During a visit to a hosting center where your organization keeps some offsite servers, you see a door with an odd-looking panel next to it. You see people approaching the panel and placing their eyes into a hooded viewer. A few seconds after they’ve done this, the door unlocks. What type of biometric scanner might this be?

• Voice recognition scanner

• Retinal scanner

• Fingerprint scanner

• Facial recognition scanner

You’ve spent the last week tweaking a fingerprint-scanning solution for your organization. Despite your best efforts, roughly 1 in 50 attempts will fail, even if the user is using the correct finger and their fingerprint is in the system. Your supervisor says 1 in 50 is “good enough” and tells you to move on to the next project. Your supervisor just defined which of the following for your fingerprint scanning system?

• False rejection rate

• False acceptance rate

• Critical threshold

• Failure acceptance criteria

Which of the following algorithms uses a secret key with a current timestamp to generate a one-time password?

• Hash-based Message Authentication Code

• Date-Hashed Message Authorization Password

• Time-based One-Time Password

• Single sign-on

With regard to authentication, an access token falls into which factor category?

• Something you are

• Something you have

• Something you know

• Something you see

Which of the following is not a common form of hardware token?

• Proximity card

• Common access card

• USB token

• Iris scan

While depositing cash from a charity fundraiser at a local bank, you notice bank employees are holding up cards next to a panel near a door. A light on the panel turns green and the employees are able to open the door. The light on the panel is normally red. What type of electronic door control is this bank using?

• Iris scanner

• Hardware token

• Proximity card

• Symmetric key token

our colleague is telling you a story she heard about a way to trick fingerprint scanners using gummy bears. She heard that if you press a gummy bear against an authorized user’s finger, you can then use that gummy bear as their fingerprint to fool a fingerprint scanner. If this works, the result is an example of which of the following?

• False negative

• False positive

• Crossover positive

• Crossover negative

To ensure customers entering credentials in your website are valid and not someone with stolen credentials, your team is tasked with designing multifactor authentication. Which of the following would not be a good choice?

• Static code

• Phone call

• Authentication application

• Short Message Service

When you’re designing and tweaking biometric systems, the point where both the accept and reject error rates are equal is known as which of the following?

• Crossover acceptance rate

• Accept-reject overlap rate

• Crossover error rate

• Overlap acceptance rate

Which of the following is not a term used in multifactor authentication?

• Someone you know

• Somewhere you are

• Something you have

• Something you see