IDAM and Network Architecture

Which of the following is the term for the process of validating a subject's identity?

• Authentication

• Auditing

• Identification

• Authorization

An employee traveling in Europe for vacation submitted a ticket as they could not access their work email. Which policy does the company use?

• Password management

• Location-based authentication

• Multi-factor authentication

• Password age

A contractor only works for a company from 9 a.m. to 12 p.m. What kind of restriction could the company set up on the contractor's account to prevent using it outside that range?

• Time-based restrictions

• Password restrictions

• Location-based restrictions

• Mandatory access control

What MFA philosophy uses knowledge factors and includes passphrases to gain access to systems?

• Something you have

• Somewhere you are

• Something you are

• Something you know

What type of password is maryhadalittlelamb?

• Cognitive

• Passphrase

• Static

• Composition

Which security principle are you complying with when you assign access permissions so that users can only access the resources required to accomplish their specific work tasks?

• Need to know

• Cross-training

• Job rotation

• Principle of least privilege

In which form of access control environment is access controlled by rules rather than identity?

• Discretionary access control (DAC)

• Most client-server environments

• Access control list (ACL)

• Mandatory access control (MAC)

What is the primary function of Active Directory as a centralized database in a network?

• It serves as a backup system for all files in the network.

• It manages the power supply to all computers in the network.

• It stores and organizes all user accounts and security information.

• It provides internet access to all computers in the network.

Which of the following is the BEST example of a secure password?

• T1a73gZ9!

• 8181952

• JoHnSmITh

• Stiles_2031

The IT department of a corporation evaluates its security mechanisms to identify areas lacking sufficient protection. Which of the following techniques should the IT department employ?

• Authorization models

• Non-repudiation

• Gap analysis

• Zero trust