Which of the Following authentication services uses a ticket granting system to provide access?

SERVER: Port 88 .

Which Authentication services would use this port by default?

Which of the following was based on previous X.500 specification and allows either unencrypted authentication or encrypted authentication through the use of TLS?

A system administrator of configuring UNIX accounts to authenticate against an external server. The configuration file asks for the following information DC+ServerName and DC=COM.

The system administrator is configuring UNIX accounts to authenticate against an external server. The configuration file asks for the following information DC=ServerName and DC=COM.

Which Following authentication services is being used?

Which of the following is an XML based open standard used in the exchange of authentication and......

Which of the following is an authentication method that can be secured by using SSL?

Which of the following provides a user ID and password together?

The fundamental information security principals include confidentiality, availability and ____________?

Which of the following is the difference between identification and authentication of a user?

A network administrator has a separate user account with rights to the domain administrator group. However, they cannot remember the password to this account and are not able to login to the server when needed.

Which of the following is MOST accurate in describing the type of issue the administrator is experiencing?

Ann works at a small company and she is concerned that there is no oversight in the finance department; specifically, that Joe writes, signs and distributes paycheques, as well as other expenditures. Which of the following controls can she implement to address this concern?

A security administrator implements access controls based on the security classification of the data and need-to-know information.

Which of the following presents the STRONGEST access control?

A user reports being unable to access a file on a network share. The security administrator determines that the file is marked as confidential and that the user does not have the appropriate access level for that file.

AC=Access Control

Which of the following is being implemented?

Which of the following common access control (AC) models is commonly used on systems to ensure a "need to know" based on classification levels?

Which of the following access controls enforces permissions based on data labeling at specific levels?

Joe has read and write access to his own home directory. Joe and Ann are collaborating on a project, and Joe would like to give Ann write access to one particular file in this home directory.

Which of the following types of access control would this reflect?

The IT department has set up a share point site to be used on the intranet. Security has established the groups and permissions on the site. No one may modify the permissions and all requests for access are centrally managed by the security team.

Which of the following control types is this an example of?

A security technician is working with the network firewall team to implement access controls at the company’s demarc as part of the initiation of configuration management processes. One of the network technicians asks the security technician to explain the access control type found in a firewall.

With which of the following should the security technician respond?

During the information gathering stage of a deploying role-based access control model, which of the following information is MOST likely required?

A company hired Joe, an accountant. The IT administrator will need to create a new account for Joe. The company uses groups for ease of management and administration of user accounts. Joe will need network access to all directories, folders and files within the accounting department.

Which of the following configurations will meet the requirements?

Users require access to a certain server depending on their job function.

Which of the following would be the MOST appropriate strategy for securing the server?

The company’s sales team plans to work late to provide the Chief Executive Officer (CEO) with a special report of sales before the quarter ends. After working for several hours, the team finds they cannot save or print the reports.

Which of the following controls is preventing them from completing their work?

Which of the following security concepts can prevent a user from logging on from home during the weekends?

A technician is reviewing the logical access control method an organization uses. One of the senior managers requests that the technician prevent staff members from logging on during nonworking days.

Which of the following should the technician implement to meet managements request?

Ann, the security administrator, wishes to implement multifactor security.

Which of the following should be implemented in order to compliment password usage and smart cards?

A network administrator uses an RFID card to enter the datacenter, a key to open the server rack, and a username and password to logon to a server.

Which of the following is these examples of?

Use of a smart card to authenticate remote servers remains MOST susceptible to the following attacks:

Employee badges are encoded with a private encryption key and specific personal information. The encoding is then used to provide access to the network.

Which of the following describes this access control type?

A Chief Information Security Officer (CISO) wants to implement two-factor authentication within the company.

Which of the following would fulfill the CISO’s requirements?

A technician wants to implement a dual factor authentication system that will enable the organization to authorize access to sensitive systems on a need-to-know basis.

Which of the following should be implemented during the authorization stage?

Which of the following is an example of multifactor authentication?

Which of the following protocols provides for mutual authentication of the client and server?

A company with a US-based sales force has requested that the VPN system be configured to authenticate the sales team based on their username, password and a client side certificate.

Additionally, the security administrator has restricted the VPN to only allow authentication from the US territory.

How many authentication factors are in use by the VPN system?

A company requires that a user’s credentials include providing something they know and something they are in order to gain access to the network.

Which of the following types of authentication is being described?

One of the most basic ways to protect the confidentiality of data on a laptop in the event the device is physically stolen is to implement the following:

Speaking a passphrase into a voice print analyzer is an example of the following security concepts:

Which of the following BEST describes using a smart card and typing in a PIN to gain access to a system?

An organization has introduced token-based authentication to system administrators due to risk of password compromise. The tokens have a set of numbers that automatically change every 30 seconds.

Which of the following type of authentication mechanism is this?

A security technician has been asked to recommend an authentication mechanism that will allow users to authenticate using a password that will only be valid for a predefined time interval.

Which of the following should the security technician recommend?

Which of the following is commonly LDAP and Kerberos used for?

After Ann, a user, logs into her banking websites she has access to her financial institution mortgage, credit card, and brokerage websites as well.

Which of the following is being described?

A company wants to ensure that all credentials for various systems are saved within a central database so that users only have to login once for access to all systems.

Which of the following would accomplish this?

A user attempting to log on to a workstation for the first time is prompted for the following information before being granted access: username, password, and a four-digit security pin that was mailed to him during account registration.

Which of the following is this an example of?

Which of the following allows a network administrator to implement an access control policy based on individual user characteristics and NOT on job function?

Which of the following is the best practice to put at the end of an ACL?

Users report that they are unable to access network printing services. The security technician checks the router access list and sees that web, email, and secure shell are allowed.

Which of the following is blocking network printing?

In order for Sara, a client, to logon to her desktop computer, she must provide her username, password, and a four-digit PIN.

Which of the following authentication methods is Sara using?

The product requires one user name and password at the time of boot up and also another password after the operating system has finished loading.

Which of the following authentication types is this setup using?

Which of the following is a measure of biometrics performance which rates the ability of a system to correctly authenticate an authorized user?

Use of group accounts should be minimized to ensure the following:

A network inventory discovery application requires non-privileged access to all hosts on a network for inventory of installed applications. A service account is created by the network inventory discovery application for accessing all hosts.

Which of the following is the MOST efficient method for granting the account non-privileged access to the hosts?

A group policy requires users in an organization to use strong passwords that must be changed every 15 days. Joe and Ann were hired 16 days ago. When Joe logs into the network, he is prompted to change his password; when Ann logs into the network, she is not prompted to change her password.

Which of the following BEST explains why Ann is not required to change her password?

The system administrator is tasked with changing the administrator password across all 2000 computers in the organization.

Which of the following should the system administrator implement to accomplish this task?

An auditing team has found that passwords do not meet the best business practices.

Which of the following passwords is the LEAST complex?

A security administrator wants to check user password complexity.

Which of the following is the BEST tool to use?

desktop configuration settings have changed. Upon a review of the CCTV logs, it is determined that someone logged into Ann’s workstation.

Which of the following could have prevented this from happening?

After a recent internal audit, the security administrator was tasked to ensure that all credentials must be changed within 90 days, cannot be repeated, and cannot contain any dictionary words or patterns. All credentials will remain enabled regardless of the number of attempts made.

An internal auditing team would like to strengthen the password policy to support special characters.

Which of the following types of password controls would achieve this goal?