WorksheetsAuthentication and Authorization
Total questions: 10
Worksheet time: 10mins
During a visit to a hosting center where your organization keeps some offsite servers, you see a door with an odd-looking panel next to it. You see people approaching the panel and placing their eyes into a hooded viewer. A few seconds after they’ve done this, the door unlocks. What type of biometric scanner might this be?
Voice recognition scanner
Retinal scanner
Fingerprint scanner
Facial recognition scanner
You’ve spent the last week tweaking a fingerprint-scanning solution for your organization. Despite your best efforts, roughly 1 in 50 attempts will fail, even if the user is using the correct finger and their fingerprint is in the system. Your supervisor says 1 in 50 is “good enough” and tells you to move on to the next project. Your supervisor just defined which of the following for your fingerprint scanning system?
False rejection rate
False acceptance rate
Critical threshold
Failure acceptance criteria
Which of the following algorithms uses a secret key with a current timestamp to generate a one-time password?
Hash-based Message Authentication Code
Date-Hashed Message Authorization Password
Time-based One-Time Password
Single sign-on
With regard to authentication, an access token falls into which factor category?
Something you are
Something you have
Something you know
Something you see
Which of the following is not a common form of hardware token?
Proximity card
Common access card
USB token
Iris scan
While depositing cash from a charity fundraiser at a local bank, you notice bank employees are holding up cards next to a panel near a door. A light on the panel turns green and the employees are able to open the door. The light on the panel is normally red. What type of electronic door control is this bank using?
Iris scanner
Hardware token
Proximity card
Symmetric key token
our colleague is telling you a story she heard about a way to trick fingerprint scanners using gummy bears. She heard that if you press a gummy bear against an authorized user’s finger, you can then use that gummy bear as their fingerprint to fool a fingerprint scanner. If this works, the result is an example of which of the following?
False negative
False positive
Crossover positive
Crossover negative
To ensure customers entering credentials in your website are valid and not someone with stolen credentials, your team is tasked with designing multifactor authentication. Which of the following would not be a good choice?
Static code
Phone call
Authentication application
Short Message Service
When you’re designing and tweaking biometric systems, the point where both the accept and reject error rates are equal is known as which of the following?
Crossover acceptance rate
Accept-reject overlap rate
Crossover error rate
Overlap acceptance rate
Which of the following is not a term used in multifactor authentication?
Someone you know
Somewhere you are
Something you have
Something you see
