AAA+04N

How does passwordless authentication differ from traditional methods?

• Uses cryptographic keys or biometrics instead of passwords
• Removes all authentication
• Uses shared credentials
• Requires longer passwords

Answer explanation

Passwordless authentication eliminates passwords, using keys or biometrics instead.

The principle of Least Privilege ensures that:

• Users have only the permissions they need
• All users are admins
• Permissions are shared
• All files are accessible

Answer explanation

Least Privilege limits users to the minimum rights required.

Role-Based Access Control (RBAC) assigns permissions based on:

• User roles
• IP address
• Device type
• Access time

Answer explanation

RBAC grants permissions according to job roles.

What policy prevents users from choosing old password again?

• Enforce Password History
• Password Aging/Expiration
• Defining password length
• Setting up MFA

Which authentication factor is 'something you are'?

• Fingerprint
• Password
• Token
• Location

Answer explanation

Something you are' represents biometric traits such as fingerprints.

User deprovisioning ensures that:

• Departed users lose access
• New users are added
• Passwords are rotated
• Admins gain control

Answer explanation

Deprovisioning removes access when a user leaves.

In Kerberos, the Ticket Granting Ticket (TGT) is used to:

• Request service tickets
• Store passwords
• Encrypt communication
• Grant admin rights

Answer explanation

TGT allows clients to request service tickets from the KDC.

What does a False Rejection Rate (FRR) represent?

• Authorized user rejected
• Unauthorized user accepted
• System delay
• User session timeout

Answer explanation

FRR measures how often legitimate users are incorrectly denied access.

What is the key difference between password aging and expiration?

• Aging tracks duration, expiration enforces reset
• Both force reset
• Expiration tracks usage
• Aging disables accounts

Answer explanation

Password aging measures time since last change; expiration enforces password renewal.

What does a False Acceptance Rate (FAR) represent?

• Unauthorized user accepted
• Authorized user rejected
• Password expired
• System timeout

Answer explanation

FAR indicates when unauthorized users are incorrectly accepted.