ITF+ Review 8

What is it called when antivirus software remediates a system by blocking access to an infected file but not actually deleting it?

• Quarantining the file

• Cleaning the infection

• Erasing the file

• Updating the signatures

What technique makes password cracking fairly easy?

• Choosing a passphrase instead of a password

• Including numbers, special characters, and letters

• Using simple words or names as a password

• Reusing the password across many sites

A user sends an email to another user. The email sender receives a delivery receipt from the receiving server. Which security-related concept validates that the email was successfully delivered?

• Authentication

• Accounting

• Authorization

• Non-repudiation

What sort of account allows someone to access a computer without providing a user name or password?

• User account

• Administrator account

• Guest account

• Microsoft Account

What are the four processes of an access control system?

• Identification, authentication, authorization, and accounting

• Subjects, objects, Access Control Lists (ACLs), and permissions

• DAC, RBAC, MAC, and rule-based

• User, default, administrator, and guest

Which non-discretionary access control type is based on the idea of security clearance levels?

• Role-based Access Control (RBAC)

• Discretionary Access Control (DAC)

• Mandatory Access Control (MAC)

• Rule-based access control

Which non-discretionary access control type is based on the idea of security clearance levels?

• Role-based Access Control (RBAC)

• Discretionary Access Control (DAC)

• Mandatory Access Control (MAC)

• Rule-based access control

What type of cryptographic operation(s) are intended to be non-reversible?

• Key-pair

• Symmetric

• Asymmetric

• Hashing

How does a one-time password work?

• The existing password is sent to a user after having requested a password change on a website.

• A unique password is generated using an algorithm known to both a device (fob) and the authenticating server.

• A temporary password is sent to a user via email after requesting a password reset.

• A user must enter a hardware token, like a smart card, and enter a password or PIN.

What system policy ensures that users do not receive rights unless granted explicitly?

• Least privilege

• Implicit deny

• Allow all

• Deny all