WorksheetsQuiz on Hardware and Software Data Security
Total questions: 15
Worksheet time: 8mins
What does data security refer to?
Preventing users from accessing data
Deleting information in an unauthorized way
Sharing information with unauthorized subjects
Protection of information against possible violations
What is compromised when information is disclosed to unauthorized subjects?
Availability
Confidentiality
Authentication
Integrity
Which access control policy is based on the identity of the user requesting access?
Mandatory Access Control
Discretionary Access Control
Role-based Access Control
Inference controls
What is the main weakness of token-based authentication?
Tokens can be forged, lost, or stolen
Tokens are expensive to implement
Tokens require user intervention for authentication
Tokens have limited processing capabilities
What is the main advantage of biometric authentication over password-based techniques?
Is less expensive to implement
Requires less user training and awareness
Is easier to remember for users
Eliminates weaknesses due to identity proof acquisition
How can replay attacks be prevented?
Sharing passwords with others
Writing down passwords for easy access
Using strong authentication methods
Using weak encryption techniques
What is the purpose of a reference monitor in access control?
Stores all user passwords securely
Monitors the physical access to the system
Intercepts every access request and determines if it should be granted or denied
Encrypts all communication between users and the system
Which access control policy is based on the concept of users having different roles within an organization?
Mandatory Access Control
Inference controls
Discretionary Access Control
Role-based Access Control
What is the main advantage of separating policies from mechanisms in access control?
Allows for independent discussion of access requirements
Limits the comparison of different access control policies
Increases the cost of implementing access control
Reduces the precision of access control mechanisms
What property ensures that an access control model is free of contradictions?
Tamper-proof
Completeness
Non-bypassable
Consistency
Which authentication method uses a pair of keys: a public key and a private key?
Shared sequence
Challenge-response
Asymmetric-key
Dynamic password generator
What is the purpose of a challenge in challenge-response authentication?
To decrypt the user's private key
To encrypt the user's identifier
To authenticate the user to the system
To generate a random string number
What is the main advantage of smart tokens over memory cards in authentication?
Memory cards have larger storage capacity
Smart tokens are less expensive
Memory cards are more secure
Smart tokens have processing capabilities
How can password security be improved to prevent guessing attacks?
Sharing passwords with colleagues
Using password generators or dictionary controls
Writing passwords down for easy access
Choosing passwords based on birthdates
What is the main concern with the deployment of biometric technology in large scale?
Limited user acceptance
High cost and expensive equipment
Intrusive nature of biometric techniques
Loss of privacy for individuals
