Implementing Authentication and Authorization

Your organization needs a system for restricting access to files based on the sensitivity of the information in those files. You might suggest which of the following access control systems?

• Discretionary access control

• Mandatory access control

• Confidential access control

• File-based access control

Which of the following describes a major difference between NTFS and FAT32 file systems?

• NTFS supports user-level access differentiation.

• FAT32 supports group-level access differentiation.

• FAT32 natively encrypts files and directories.

• NTFS logs all file access using secure tokens.

Your organization has grown too large to support assigning permissions to users individually. Within your organization, you have large groups of users who perform the same duties and need the same type and level of access to the same files. Rather than assigning individual permissions, your organization may wish to consider using which of the following access control methods?

• Group-based access control

• Shift-based access control

• Role-based access control

• File-based access control

A ticket-granting server is an important element in which of the following authentication models?

• 802.1X

• RADIUS

• TACACS+

• Kerberos

Which of the following is an open standard that uses security tokens and assertions and allows you to access multiple websites with one set of credentials?

• PAP

• CHAP

• SSO

• SAML

What protocol is used for RADIUS?

• UDP

• NetBIOS

• TCP

• Proprietary

What are accounts with greater than “normal” user access called?

• Privileged accounts

• System accounts

• Superuser accounts

• Audit accounts

You have to implement an OpenID solution. What is the typical relationship with existing systems?

• OpenID is used for authentication, OAuth is used for authorization.

• OpenID is used for authorization, OAuth is used for authentication.

• OpenID is not compatible with OAuth.

• OpenID only works with Kerberos.

You wish to create an access control scheme that enables the CFO to access financial data from his machine, but not from the machine in the reception area of the lobby. Which access control model is best suited for this?

• Role-based access control

• Conditional access control

• Mandatory access control

• Discretionary access control

You need to design an authentication system where users who have never connected to the system can be identified and authenticated in a single process. Which is the best solution?

• RADIUS

• Password vault-based authentication

• TPM-based authentication

• Knowledge-based authentication