CYB125 - Ch6

Wen is a network engineer. For several months, he has been designing a system of controls to allow and restrict access to network assets based on various methods and information. He is currently configuring the authentication method. What does this method do?

• Answers the question "who is asking to access the asset?"

• Verifies that requestors are who they claim to be

• Grants or denies a requestor access and what they can do on a network

• Determines how actions can be traced to an individual

Keisha is a network administrator. She wants a cloud-based service that will allow her to load operating systems on virtual machines and manage them as if they were local servers. What service is Keisha looking for?

• Remote Authentication Dial-In User Service (RADIUS)

• Infrastructure as a Service (IaaS)

• Platform as a Service (PaaS)

• Software as a Service (SaaS)

What is an example of a logical access control?

• Key for a lock

• Password

• Access card

• Fence

Which type of authentication includes smart cards?

• Knowledge

• Ownership

• Location

• Action

What is an example of two-factor authentication (2FA)?

• Smart card and personal identification number (PIN)

• PIN and password

Which type of password attack is used on weak passwords and compares a hashed value of the passwords to the system password file to find a match?

• Dictionary attack

• Rainbow table attack

• Social engineering attack

• Brute-force attack

Lincoln is a network security specialist. He is updating the password policy for his company's computing infrastructure. His primary method of improving password policy involves lowering the chance that an attacker can compromise and use the password before it expires. What does he do?

• Enables a 30-day password change policy

• Requires all passwords to contain at least eight alphanumeric characters

• Mandates that no password includes words common in an English dictionary

• Forbids a password being changed to any of the previous 10 passwords listed in the password history

Which of the following is the point at which two error rates of a biometric system are equal and is the measure of the system’s accuracy expressed as a percentage?

• False Acceptance Rate (FAR)

• False Rejection Rate (FRR)

• Crossover Error Rate (CER)

• Equal Error Rate (EER)

The CER is the point at which the FAR and FRR are equal. Which of the following represents the CER?

• False acceptance rate (FAR)

• False rejection rate (FRR)

• Crossover error rate (CER)

• Reaction time

Devaki is evaluating different biometric systems. She understands that users might not want to subject themselves to retinal scans due to privacy concerns. Which concern of a biometric system is she considering?

• Accuracy

• Reaction time

• Dynamism

• Acceptability