NEW
Font size
WorksheetsSecurity Plus 1-02
Total questions: 20
Worksheet time: 19mins
Which of these Authentication Concepts PROVE a users identity?
Identification
Authentication
Authorization
Access
A user name and password fall into which of these factors of authentication?
Something you are
Something you have
Something you know
Something you do
Which IT term is used for logging all activities to ensure there is clear evidence.
Note Taking
Log Keeping
Record Management
Accounting
A unit used to measure the average number of unauthorized users who are incorrectly verified as authorized users on a biometric security system.
False Acceptance Rate
False Rejection Rate
True Acceptance Rate
True Rejection Rate
Which is an example of multi-factor authentication (MFA)?
Fingerprint and Smart Card
Username and Password
Retinal Scan and Fingerprint
Key Fob and time-based one-time password (TOTP)
A time-stamped ticket-based system used for network authentication that runs over port 88.
TACACS+
Kubernetes
Kerberos
WPA2-Enterprise
What port does RADIUS (Remote Authentication Dial-In User Service) use?
389
1812
1701
22
Which access control model uses roles such as "Administrator" or "Team Member" to control access levels to data?
ABAC
RBAC
RuBAC
DAC
Which access control model identifies resources as objects, specifies that every object has an owner, and gives full, explicit control of that object to the object owner. In this control model, the owner can control who has access.
RuBAC
DAC
MAC
RBAC
This is known as the process of withdrawing user privileges, either when the user stops performing in a certain role or leaves the organization completely.
Account Monitoring
Onboarding Process
Access Withdrawal
Offboarding Process
This organizational security agreement governs the use and storage of shared confidential and private information.
Memorandum of Understanding (MOU)
Non-disclosure Agreement (NDA)
Measurement Systems Analysis (MSA)
Business Partnership Agreement (BPA)
What term assumes that there is no implicit trust granted to assets or user accounts based solely on their physical or network location, or asset ownership?
Zero Trust
Asset Liability
Asset Protection
Implicit Trust
Which part of a AAA server is responsible for ensuring users are granted the appropriate accesses and permissions?
Authentication
Authorization
Accounting
Availability
John wants to unlock his phone. To do so he uses his finger to perform a specific pattern across the screen. Which factor of authentication is John using?
Something you have
Something you know
Something you do
Something you are
This term defines the inability to dispute your identity, authorship, or validity of a statement or contract.
Identification
Authorization
Non-repudiation
Identity Verification
What port does TACACS+ use?
49
389
161
80
Sarah sings in using one set of credentials, and her credentials are used throughout her entire session. What acronym best defines this technology?
REST/API
UAC
MAC
SSO
Corey needs a service provider to help his business. In order to ensure that expectations are met, services are delivered on time, and performance metrics are ensured between the service provider and Corey, what should Corey use?
Business Partnership Agreement (BPA)
Memorandum of Understanding (MOU)
Business Impact Analysis (BIA)
Service Level Agreement (SLA)
Bob, an authorized employee of Dynacorp, goes into his job where he has been working for the past eight years. He goes to the biometric scanner and is denied entry. The biometric security system does not recognize him. What metric is used to measure this?
False Acceptance Rate (FAR)
False Rejection Rate (FRR)
True Rejection Rate (TRR)
True Acceptance Rate
DynaCorp has rolled out a new application that requires use of a hardware-based token generator. Which of the following would be the BEST description of this access feature?
Something you know
Something you do
Something you are
Something you have
