Security+ Identity and Account Types

Which of the following options best defines the concept of "Single Sign-On" (SSO) in the context of identity and account types?

• A method that grants users unrestricted access to all organizational resources without any security checks.
• A security feature that requires users to enter their credentials multiple times to access different applications or resources.
• An authentication process that requires users to verify their identity using multiple factors, such as passwords, biometrics, and security tokens.
• A system that allows users to authenticate once and access multiple applications or resources without re-entering their credentials.
• A technology that encrypts user credentials to prevent unauthorized access to sensitive information.

Which of the following is NOT an example of a user account type commonly used in an organization?

• Standard User
• Guest
• Superuser
• Administrator
• Manager

Which of the following best describes the concept of least privilege in the context of account types?

• Allowing users to bypass security controls and protocols.
• Allowing users to have unlimited access to all resources and system settings.
• Assigning the same level of access rights to all users regardless of their job responsibilities.
• Giving users administrative access to all resources in the organization.
• Limiting user access rights to only the minimum necessary privileges to perform their job functions.

Which of the following technologies provides a mechanism for securely authenticating users by using a combination of public keys and digital certificates?

• Public Key Infrastructure (PKI)
• Lightweight Directory Access Protocol (LDAP)
• Single Sign-On (SSO)
• Secure Socket Layer (SSL)
• Kerberos

Which of the following is an example of a strong authentication factor?

• Something you know (e.g., password)
• Something you are (e.g., fingerprint)
• Something you see (e.g., CAPTCHA)
• Something you do (e.g., typing pattern)
• Something you have (e.g., ID card)

Which of the following authentication methods uses a unique physical characteristic, such as fingerprints or iris scan, to verify a user's identity?

• Biometric authentication
• Smart card authentication
• Two-factor authentication
• Knowledge-based authentication
• Token-based authentication

In the context of account types, what does the term "access control list" (ACL) refer to?

• A list of revoked security certificates for user accounts.
• A list of previous login attempts made by a user.
• A list of users who are authorized to access a specific file or resource.
• A list of allowed network protocols and services for a user account.
• A list of user accounts with system administrative privileges.

Which of the following options best describes the concept of "role-based access control" (RBAC)?

• A security model that allows users to access resources based on their job title or position within the organization.
• A process of verifying user identities using biometric characteristics, such as fingerprints or facial recognition.
• A method of granting all users the same level of access rights to all resources.
• A security feature that denies access to user accounts after a specified number of failed login attempts.
• A method of granting temporary access to specific users for a limited period of time.

In the context of account management, what does the term "account provisioning" refer to?

• The process of encrypting user credentials to ensure data confidentiality.
• The process of granting temporary access to guest users.
• The process of auditing and monitoring user account activities.
• The process of granting administrative privileges to user accounts.
• The process of creating, modifying, or disabling user accounts.

Which of the following options best describes the concept of "separation of duties"?

• Restricting user access to only the resources and applications relevant to their job responsibilities.
• Ensuring that different individuals are responsible for different stages of a process to prevent fraud and error.
• Allowing all employees to have unrestricted access to all organizational resources.
• Assigning multiple user roles to a single individual to improve operational efficiency.
• Granting superuser privileges to a select group of individuals within an organization.