NEW
Font size
WorksheetsManaging User Security
Total questions: 30
Worksheet time: 15mins
The process of validating a user’s credentials is known as_____.
authorization
authenticiation
verification
compliance
Which of the following is an example of multifactor authentication?
A strong password and a security question
Using fingerprints and an eye scan
A digital token and password
A digital token and a CAC
Which of these is NOT an example of a biometric authentication method?
A dongle
Palm print
Voice analysis
Facial Recognition
Which of the following describes a scenario in which an authorized user is denied access after using his or her fingerprint to gain access to a system?
Cross-over error rate (CER)
False rejection rate (FRR)
False acceptance rate (FAR)
True rejection rate (TRR)
Often used in the military, this access level sets strict rules on data access.
Discretionary Access Control
Rule based Access Control
Mandatory Access Control
Role based Access Control
The owner of the data assigns permissions in this access level control.
Owner Based Access Control
Role Based Access Control
Mandatory Access Control
Discretionary Access Control
Which statement describes a characteristic of rule-based access control?
It is the same as Mandatory Access Control.
It can restrict the hours during which a user may log in.
It assigns users to groups to ensure all users have the same rights.
It has different permissions for each user.
Which of the following is a justification for mandatory vacations?
To ensure other people can perform a job duty
To split up the duties of different individuals
To evaluate and audit an employee’s data access
To train others as network administrators
Best practices include giving a user the minimum access to perform their job. This concept is known as ____.
principle of permissions
separation of privilege
workstation privilege
least privilege
A database of network resources from Microsoft is called ____.
Active Directory
LDAP
Microsoft IIS
Kerberos
When a user logs into the network, Kerberos issues ____ to gain access to resources.
permissions
rights
tickets
tokens
The local database on a Windows workstation that contains user accounts is called?
LDAP
Security Account Manager
A hash
A Trust
Objects that represent resources are called ____ in the Active Directory.
resource objects
organizational units
domain objects
leaf objects
A set of rules that can automatically control access to resources is called a ____.
right
permission
policy
instruction
Which of the following represents the most complex password for a user named Casey Wills?
CaseyWiLLS
hardtoguessp@ssword
$trOnG
PC@s3Y4EvR!
Which is not a share permission?
Read
Write
Change
Full Control
Jordan is given the read permission to Folder1. The group Engineers is given the full control permission to the Folder1 share. Jordan is a member of this group. What are her resulting share permissions to Folder1?
Read
Full control
No permissions
She has read permissions to her files only and full control to all other files.
The net result of permissions a user has to a folder is called their ____ permissions.
explicit
inherited
effective
usable
Which NTFS normal permission allows a user to delete files?
Change
Write
Modify
Delete
The permissions a user is given at a specific location are called ____ permissions.
Direct
Implicit
Express
Explicit
The ____ permission allows a user to take ownership of files and folders.
modify
full control
advanced
execute
Olivia received permissions from a group called Engineers. Permissions she gets as a result of her group are called ____.
Associated permissions
Explicit permissions
Implicit permissions
Affiliated permissions
How is the crossover error rate determined?
The number of false rejections in a 24-hour time period
The number of false acceptances in a 24-hour time period
The point where false acceptances and false rejections meet
The quality of the biometric equipment
When a(n) ____ is configured, a user can be authenticated on one domain and automatically be authenticated on another.
LDAP
trust relationship
SAML
Kerberos security
A user logs in with his or her username and password. Next, he or he is prompted to provide the correct answer to a security question. This scenario is an example of ____ authentication.
multifactor
Kerberos
single-factor
text-based
Which password policy setting prevents a user from reusing an old password by checking a new password against previously used passwords?
Minimum password age
Maximum password age
Account verification
Enforce password history
Which setting would be configured to determine how long an account will be disabled if a specific number of invalid attempts is made.
Account lockout threshold
Minimum lockout standard
Account lockout duration
Enforce account lockout
Which of the following is true regarding a password that is used on a token or phone?
It is considered a one-time password.
It can be a significant security risk.
It can be comprised only of numbers.
It can be shared by multiple users.
A user logs in with his or her username and password. Next, he or he is prompted to provide the correct answer to a security question. This scenario is an example of ____ authentication.
multifactor
Kerberos
single-factor
text-based
Which is NOT true about the Active Directory?
It is the security database used for local Windows computers.
It is based off the LDAP standard.
It has a hierarchical structure.
User accounts contained in the directory are called objects.
