Your organization requires a method for desktop computers to verify that the machine boots only with trusted operating systems. Which firmware components must be present to meet this requirement? (Choose two.)

Which configuration option enhances the user authentication process?

Which term best embodies a centralized network database containing user account information?

Which authentication example is considered multifactor authentication?

When authenticating to your cloud account, you must supply a username, password, and a unique numeric code supplied from a smartphone app that changes every 30 seconds. Which term is used to describe the changing numeric code?

Which authentication protocol transmits user sign-in credentials in plain text over the network?

Your organization is creating a web application that generates animated video from story text. Instead of requiring users to create an account with your organization before using the app, you want to enable users to sign in using their existing Google or Facebook accounts. What type of authentication is this?

Which security hardware can be used for multifactor authentication?

Which term best describes a user authenticating to a service and receiving a unique authentication code via a phone call?

Which type of authentication method measures the motion patterns of a person’s body movement?

A user complains that her new laptop occasionally does not allow fingerprint authentication. Which term best describes this situation?

A travelling employee is unable to authenticate to a corporate custom web application that is normally accessible when he’s at home. What type of authentication is in place or the custom web application?

Which of the following represents the correct sequence in which AAA occurs?

You have configured your smartphone authentication such that, using your finger, you connect points on a picture. Which type of authentication category does this apply to?

You have forgotten your login credentials for a secure web site. The forgotten password mechanism on the site prompts you to enter your PIN before selecting a help desk user that will supply you with a reset code. Which type of forgotten password authentication mechanism is at work here?

Cloud technicians in your organization have linked your on-premises Microsoft Active Directory domain to a cloud-based directory service. What benefit is derived from this configuration?

Which type of authentication environment is depicted in Figure 10-1?

Which type of authentication is depicted in Figure 10-2?

Which type of authentication is depicted in Figure 10-3?

Which of the following is an example of authentication?

Users complain that they cannot use different usernames and passwords for all of the web applications they use because there are too many to remember, so they use the same username and password for all of the web apps. You need to ensure that users maintain unique usernames and complex passwords for all web apps while minimizing user frustration. What should you deploy for users?

A malicious user has removed an encrypted drive from a TPM-enabled system and connected it to his own TPM-enabled computer. What will the outcome be?

Which fact is specific to the Challenge Handshake Authentication Protocol (CHAP)?

How does OAuth determine whether a user is permitted to access a resource?

Which term is the most closely associated with Figure 10-4?

After successful authentication, which method can be used to transmit authorization details to a resource provider to grant resource access?

Which statements regarding OAuth are correct? (Choose two.)

You need to configure VPN authentication methods that use PKI certificates. Which VPN configuration option should you choose?

To secure VPN access, you need a solution that will first authenticate devices before allowing network access. Which authentication standard does this apply to?

You do not want authentication handled by wireless access points in your network. What should you configure?

Which authentication standard is directly related to identity federation?

Which identity federation component authenticates users?

After successful authentication, which SAML component contains claim information?

You are configuring file system security such that Microsoft Active Directory user accounts with a specific manager configured in their user account properties are granted file system access. What type of access control configuration is this?

Which of the following constitutes multifactor authentication?

You are configuring SSH public key authentication for a Linux host. Which statements about this configuration are correct? (Choose two.)

After configuring SSH public key authentication for a Linux host, users complain that they are prompted for a passphrase when using SSH to connect to the host. Why is this happening?

Which configuration limits the use of a mobile device to a specific area?

While scrolling through social media posts, you come across a friend’s post stating that he had recently boarded a flight from Las Vegas en route to Toronto. What is this an example of?

Which user password setting will prevent the reuse of old passwords?

You have configured user workstations so that upon a user’s login, a message states that the system may be used only to conduct business in accordance with organizational security policies, and that noncompliance could result in disciplinary action. Which type of security control is this?

Which type of access control model uses a hardened specialized operating system with resource labeling and security clearance levels to control resources access?

Your cloud-based virtual machine runs a custom application workload that requires access to resources running within on-premises virtual machines. What should you do to enable secure connectivity between the virtual machines? (Choose two.)

Which term is the most closely related to the “impossible travel time” security feature?

You are configuring file servers in the enterprise to allow read-only access to files labeled as “PII” for users accessing files from the corporate network if they have been assigned to a project named “ProjectA.” Which type of access control mechanism is being used?

The IT department has been tasked with conducting a risk assessment related to the migration of a line-of-business app to the public cloud. To which security control category does this apply?

You have been tasked with the weekly tape backup rotation for backing up on-premises database servers. To which security control category does this apply?

Organizational security policies require that customers’ personal information be encrypted when stored. To which security control category does this apply?

You are configuring a hardware firewall to allow traffic only from a jump box in the DMZ to internal Linux hosts. Which type of security control is this?

To achieve regulatory compliance, your organization must encrypt all fixed disks to protect data at rest on each station. Your company plans on using the Microsoft Windows BitLocker drive encryption feature. None of your computers has a TPM chip, so you have configured Group Policy such that decryption keys can be stored on a removable USB thumb drive. Which type of security control is this?

You have configured a network-based intrusion prevention system (NIPS) hardware appliance to block traffic from IP addresses that send excessive traffic to your network. Which type of security control is this?

You are a consultant helping a retail client with app geofencing. Which type of tracking mechanisms can you use to enable geofencing for customers with the retail app installed on their smartphones?

Your identity federation configuration creates digitally signed tokens for authenticated users that contain the user date of birth and security clearance level. Which term is used to describe this extra data added to the token?

Why is the SSH authentication error in Figure 11-1 occurring?

You are viewing the contents of the Linux authorized_keys file. Which type of key is stored here?

You need to assess whether Linux servers in the screened subnet need to be hardened. The servers are currently configured with SSH public key authentication. What should you check that should be in place? (Choose two.)

Which statements regarding SSH public key authentication are correct? (Choose two.)

You are an IT technician for FakeCorp1. You have configured your on-premises Microsoft Active Directory domain controller server, Dc1, as a federated identity provider during the acquisition phase of a competitor, FakeCorp2. The IT team at FakeCorp2 must configure web app servers to trust tokens issued by FakeCorp1. What should you provide to the technicians?

What is normally required when using smartcard authentication? (Choose two.)

Where are virtual smartcards stored?

Your organization plans on issuing smartcards to users for the purposes of digitally signing and decrypting e-mail messages. What must be deployed to the smartcards?

What is one disadvantage of using a virtual smartcard in a Microsoft Windows environment?

A user account lockout configuration helps mitigate which type of attack?