Authentication/Access Control/Enterprise Architecture

Which of the following is the term for the process of validating a subject's identity?

• Authorization

• Authentication

• Auditing

• Identification

An employee traveling in Europe for vacation submitted a ticket as they could not access their work email. Which policy does the company use?

• Multi-factor authentication

• Password age

• Password management

• Location-based authentication

A contractor only works for a company from 9 a.m. to 12 p.m. What kind of restriction could the company set up on the contractor's account to prevent using it outside that range?

• Password restrictions

• Mandatory access control

• Location-based restrictions

• Time-based restrictions

A cyber engineer conducts a multi-factor authentication (MFA) assessment of an organization's authentication security. What MFA philosophy uses knowledge factors and includes passphrases to gain access to systems?

• Something you have

• Somewhere you are

• Something you know

• Something you are

What type of password is maryhadalittlelamb?

• Composition

• Static

• Passphrase

• Cognitive

You assign access permissions so that users can only access the resources required to accomplish their specific work tasks. Which security principle are you complying with?

• Principle of least privilege

• Job rotation

• Need to know

• Cross-training

In which form of access control environment is access controlled by rules rather than identity?

• Mandatory access control (MAC)

• Discretionary access control (DAC)

• Access control list (ACL)

• Most client-server environments

What is the primary function of Active Directory as a centralized database in a network?

• It provides internet access to all computers in the network.

• It serves as a backup system for all files in the network.

• It stores and organizes all user accounts and security information.

• It manages the power supply to all computers in the network.

You are teaching new users about security and passwords. Which of the following is the BEST example of a secure password?

• JoHnSmITh

• Stiles_2031

• 8181952

• T1a73gZ9!

The IT department of a corporation evaluates its security mechanisms to identify areas lacking sufficient protection. Which of the following techniques should the IT department employ?

• Authorization models

• Zero trust

• Gap analysis

• Non-repudiation