Identification and Authentication

What are the three steps in the access control process?

• Identification, Authentication, Authorization

• Authentication, Authorization, Identification

• Authorization, Identification, Authentication

• Authentication, Identification, Authorization

What is the purpose of identification in information security?

• To prove who you are

• To prevent unauthorized access

• To increase security and reduce fraud

• To verify the claim of identity

Which factor is NOT commonly used in authentication?

• Something you know

• Something you have

• Something you are

• Where you are

What is the main difference between identification and authentication?

• Identification proves who you are, while authentication verifies your claim of identity

• Identification verifies your claim of identity, while authentication proves who you are

• Identification focuses on proving who you are, while authentication focuses on proving that you are who you say you are

• Identification and authentication are the same thing

What is an example of mutual authentication?

• Using a username and password to log in to a computer

• Using a fingerprint to unlock a phone

• Using a smart card and PIN to access a secure building

• Using a digital certificate to authenticate both the client and the server

Which factor is commonly used in passwords?

• Something you know

• Something you have

• Something you are

• Where you are

What is the main advantage of multifactor authentication?

• It is more convenient than passwords alone

• It is less secure than passwords alone

• It requires the user to provide additional information or perform additional steps

• It is more difficult for an attacker to compromise all of the required factors

What is the primary purpose of biometrics?

• To prevent unauthorized access

• To increase security and reduce fraud

• To verify the claim of identity

• To prove who you are

What is the false acceptance rate (FAR) in biometrics?

• The percentage of times that an unauthorized person is incorrectly accepted by the system

• The percentage of times that an authorized person is incorrectly rejected by the system

• The percentage of times that an unauthorized person is correctly rejected by the system

• The percentage of times that an authorized person is correctly accepted by the system

What is the main advantage of hardware tokens?

• They are more secure than passwords alone

• They are more convenient than passwords alone

• They require the user to have a public and private key pair

• They can be easily integrated with biometric systems