CISSP - Quis 4 - IAM

1. Which of the following is not one of the three types of access controls?

• Administrative

• Personnel

• Technical

• Physical

1. Your company has just opened a call center in India to handle nighttime operations, and you are asked to review the site’s security controls. Specifically, you are asked which of the following is the strongest form of authentication. What will your answer be?

• Something you know

• Something you are

• Password

• Token

Your organization has become worried about recent attempts to gain unauthorized access to the R&D facility. Therefore, you are asked to implement a system that will require individuals to present a password and enter a PIN at the security gate before gaining access. What is this type of system called?

• Authorization
  

• Two-factor authentication

• Authentication

• Three-factor authentication

Which of the following is not one of the three primary types of authentication?

• Something you remember

• Something you know

• Something you are

• Something you have

While working as a contractor for Widget, Inc., you are asked what the weakest form of authentication is. What will you say?

• Passwords

• Retina scans

• Facial recognition

• Tokens

6. You’re preparing a presentation for the senior management of your company. They have asked you to rank the general order of accuracy of the most popular biometric systems, with 1 being the lowest and 5 being the highest. What will you tell them?

• 1. (1) fingerprint, (2) palm scan, (3) hand geometry, (4) retina scan, (5) iris scan

• 1. (1) fingerprint, (2) palm scan, (3) iris scan, (4) retina scan, (5) hand geometry

• 1. (1) palm scan, (2) hand geometry, (3) iris scan, (4) retina scan, (5) fingerprint

• 1. (1) hand geometry, (2) palm scan, (3) fingerprint, (4) retina scan, (5) iris scan

6. Which of the following items is the least important to consider when designing an access control system?

• Risk

• Threat

• Vulnerability

• Annual Loss. Expectancy

8. Today, you are meeting with a coworker who is proposing that the number of logins and passwords be reduced. Another coworker has suggested that you investigate single sign-on technologies and make a recommendation at the next scheduled meeting. Which of the following is a type of single sign-on system?

• Kerberos

• RBAC

• DAC

• SAML

Your organization has decided to use a biometric system to authenticate users. If the FAR is high, what happens?

• Legitimate users are denied access to the organization’s resources.

• Illegitimate users are granted access to the organization’s resources.

• Legitimate users are granted access to the organization’s resources.

• Illegitimate users are denied access to the organization’s resources.

Which of the following types of copper cabling is the most secure against eavesdropping and unauthorized access?

• Single-mode fiber

• Multimode fiber

• Category 6 cabling

• 802.11ac wireless