4) Federated Identity and Account Security

Angela has chosen to federate with other organizations to allow use of services that each organization provides. What role does Angela's organization play when they authenticate their users and assert that those users are valid to other members of the federation?

• Service provider

• Relying party

• Authentication provider

• Identity provider

Which of the following technologies is the least effective means of preventing shared accounts?

• Password complexity requirements

• Requiring biometric authentication

• Requiring one-time passwords via a token

• Requiring a one-time password via an application

What major difference is likely to exist between on-premises identity services and those used in a cloud-hosted environment?

• Account policy control will be set to the cloud provider's standards.

• The cloud service will provide account and identity management services.

• Multi Factor authentication will not be supported by the cloud vendor.

• None of the above.

Amitoj wants to ensure that her organization's password policy does not allow users to reset their password multiple times until they can reuse their current password. What setting is used to prevent this?

• Complexity

• Length

• Expiration

• Age

Which type of multifactor authentication is considered the least secure?

• HOTP

• SMS

• TOTP

• Biometric

SMS messages are not secure and could be accessed by cloning a SIM card or redirecting VoIP traffic. Which of the following is generally considered more secure than an SMS-based factor?

• HOTP and TOTP tokens

• SMS-based factor

• Email verification

• Passwords

Geeta has been issued a USB security key as part of her organization's multifactor implementation. What type of implementation is this?

• A hard token

• A biometric token

• A soft token

• An attestation token

A USB security key is an example of which type of token?

• A soft token

• A biometric token

• A hard token

• An attestation token

Michelle enables the Windows picture password feature to control logins for her laptop. Which type of attribute will it provide?

• Somewhere you are

• Something you know

• Something you are

• Someone you know

What does the picture password feature ask users to do?

• Enter a numeric code

• Click on specific, self-defined parts of a picture

• Use a fingerprint scanner

• Provide a voice command