Security Plus 1-02

Which of these Authentication Concepts PROVE a users identity?

• Identification

• Authentication

• Authorization

• Access

Answer explanation

Identification professes an identity.

Authentication proves an identity.

Authorization grants access to resources based on authentication.

Access just means you have access.

A user name and password fall into which of these factors of authentication?

• Something you are

• Something you have

• Something you know

• Something you do

Answer explanation

These fall into something you know.

Something you do is a gesture on a touch screen.

Something you have is like a smart card.

Something you are is like your fingerprint.

Which IT term is used for logging all activities to ensure there is clear evidence.

• Note Taking

• Log Keeping

• Record Management

• Accounting

Answer explanation

In Identity and Access Management, Accounting is the term used for logging all activities to ensure there is clear evidence.

A unit used to measure the average number of unauthorized users who are incorrectly verified as authorized users on a biometric security system.

• False Acceptance Rate

• False Rejection Rate

• True Acceptance Rate

• True Rejection Rate

Answer explanation

FAR - False Acceptance Rate is a way to measure how many people get into a place that aren't supposed to be allowed in. It identifies when a biometric security system allows an unauthorized user in due to an error, falsely saying they are authorized to go in.

Which is an example of multi-factor authentication (MFA)?

• Fingerprint and Smart Card

• Username and Password

• Retinal Scan and Fingerprint

• Key Fob and time-based one-time password (TOTP)

Answer explanation

Fingerprint and Smart Card is something you are and something you have.

Every other option is the same category.

A time-stamped ticket-based system used for network authentication that runs over port 88.

• TACACS+

• Kubernetes

• Kerberos

• WPA2-Enterprise

Answer explanation

Kerberos is a network authentication protocol that runs over port 88 and uses a ticket granting service where the tickets will expire after a period of time. We authenticate with port 88.

What port does RADIUS (Remote Authentication Dial-In User Service) use?

• 389

• 1812

• 1701

• 22

Answer explanation

RADIUS uses port 1812.

Which access control model uses roles such as "Administrator" or "Team Member" to control access levels to data?

• ABAC

• RBAC

• RuBAC

• DAC

Answer explanation

ABAC uses attributes to control accesses.

RBAC uses roles to control accesses.

DAC uses object ownership to control accesses.

RuBAC uses rule sets and instructions to control accesses.

Which access control model identifies resources as objects, specifies that every object has an owner, and gives full, explicit control of that object to the object owner. In this control model, the owner can control who has access.

• RuBAC

• DAC

• MAC

• RBAC

Answer explanation

RuBAC uses instructions and rule sets to manage accesses.

RBAC uses roles to manage accesses.

DAC defines ownership of resources, and the owner manages the accesses.

MAC uses labels such as SECRET/TOP SECRET to manage accesses.

This is known as the process of withdrawing user privileges, either when the user stops performing in a certain role or leaves the organization completely.

• Account Monitoring

• Onboarding Process

• Access Withdrawal

• Offboarding Process

Answer explanation

This process is known as offbaording an employee.