Module 5 Unit 3 Using Access Controls Test

____________________ are where an intruder is misidentified as a valid user or one user is mistaken for another and __________________ are where a valid user is refused access.

• False positives, false negatives
• True negatives, false positives
• False positives, true negatives
• False negatives, false positives

Users should only be granted the minimum sufficient permissions. What system policy ensures that users do not receive rights unless granted explicitly?

• Implicit deny
• Brute force
• Cleartext credentials
• Certificate Authority

__________________ are users or software processes or anything else that can request and be granted access to a resource while ________________ are the resources like networks, servers, databases, files, and so on.

• Subjects, objects
• Objects, subjects
• Accesses, subjects
• Accesses, objects

What type of control prevents a user from denying they performed an action?

• Non-repudiation
• Multifactor Authentication
• Public Key Infrastructure
• Encryption

Which is NOT an authentication technology category (factor)?

• Something you can
• Something you have
• Something you are
• Something you know

How does a one-time password work?

• The password is generated by an asymmetric encryption algorithm.
• The password is generated by a symmetric encryption algorithm.

What is the name of the password cracker in the picture?

• Cain and Abel
• Cain and Saul
• Paul and Abel
• Saul and Paul

____________________ is a list of subjects and the rights or permissions they have been granted on the object.

• Access Control List
• Access Computer List
• Authorize Control List
• Authorize Computer List

What class of data is a transport encryption protocol designed to protect?

• Data in transit
• Data at rest
• Data when needed
• Data to file

In asymmetric encryption, a secret private key is used to _____________ data and a mathematically related public key is used to ________________ data.

• decrypt, encrypt
• encrypt, decrypt
• privatize, publicize
• publicize, privatize