Chapter Three Practice Quiz - Info Sec

What are the two main concepts involved in deciding whether to allow party access to your resources?

• Authentication and Encryption

• Authorization and Access Control

• Identification and Verification

• Encryption and Decryption

What is the process of determining exactly what an authenticated party can do?

• Authentication

• Encryption

• Authorization

• Verification

What are the tools and systems you use to deny or allow access?

• Encryption keys

• Access controls

• Passwords

• Firewalls

Which of the following is NOT a form of physical access control?

• Keys

• RFID tags

• Passwords

• Badges

What are the four basic tasks you can use access controls to carry out?

• Allowing access, denying access, limiting access, and revoking access

• Allowing access, encrypting data, limiting access, and revoking access

• Allowing access, denying access, encrypting data, and decrypting data

• Allowing access, denying access, verifying identity, and encrypting data

What is the opposite of granting access?

• Allowing access

• Denying access

• Limiting access

• Implementing access

What is the default setting for many access control systems?

• Allow access

• Deny access

• Limit access

• Grant access

What is one way to limit access by running sensitive applications?

• Using firewalls

• Using antivirus software

• Using sandboxes

• Using encryption

What is an example of a sandbox used to run programs written in the Java programming language?

• JavaScript Engine

• Java Virtual Machine (JVM)

• Java Development Kit (JDK)

• Java Runtime Environment (JRE)

What are the two main methods of implementing access controls?

• Access control lists and capabilities

• Firewalls and antivirus software

• Encryption and decryption

• Passwords and biometrics