Quiz 02-Finals-IT 222-FIAS

1. Which component primarily ensures that only authenticated users can access sensitive information by verifying their physical or behavioral traits?

• Certificates

• Biometrics

• Tokens

• Passwords

2. In a security system, which method utilizes a trusted third-party authority to establish a user's identity via a digitally issued credential?

• Multi-factor authentication

• Digital certificates

• Biometric authentication

• Secure socket layer (SSL)

3. A company mandates the use of both something the user knows and something the user has to access its system. This is an example of:

• Single-factor authentication

• Multi-factor authentication

• Biometric authentication

• Token-based authentication only

4. Which security feature is most susceptible to being compromised if an attacker steals stored data without proper encryption?

• Biometrics

• Digital certificates

• Passwords

• Certificates issued by trusted authorities

5. When an organization utilizes a hardware device generating one-time passwords that are used for authentication, this is best classified as:

• Biometric verification

• Certificate-based authentication

• Token-based authentication

• Password authentication

6. A small startup is considering implementing an authentication system that balances ease of use with security. They want something robust but user-friendly, primarily for internal access. Which method should they prioritize?

• Multi-factor authentication combining biometrics and hardware tokens

• Passwords combined with digital certificates

• Biometric authentication alone

• Single-factor password-based authentication

7. An organization is designing a web application that must protect user credentials both in transit and at rest. Which combination of security measures best addresses this need?

• SSL/TLS for data in transit and encrypted storage for credentials

• Biometric security on the client-side and unencrypted server storage

• Certificates issued by third-party authorities and plain-text passwords

• Hardware tokens and storage without encryptio

8. In evaluating the effectiveness of various authentication factors, which of the following is the most significant weakness when used independently?

• Passwords—susceptible to brute-force attacks

• Biometrics—difficult to revoke if compromised

• Digital certificates—reliance on third-party trust

• Tokens—are vulnerable if lost or stolen

A security analyst recommends re-evaluating the authentication approach for a highly sensitive system. Which factor should be emphasized for maximum security?

• Combining biometrics with multi-factor authentication protocols

• Relying solely on tokens for simplicity

• Using passwords as the only verification method

• Issuing digital certificates without multi-factor support

1. To strengthen security, organizations often implement (a)   , which combine two or more independent authentication factors to verify user identities, thereby reducing the risk of compromise.