NEW
Font size
WorksheetsID and Access Management
Total questions: 70
Worksheet time: 35mins
What are the three principles of the CIA Triad?
Confidentiality, Integrity, Availability
Confidentiality, Innovation, Accessibility
Control, Integrity, Access
Communication, Information, Access
What is the fundamental security goal of confidentiality?
Keeping information accurate and free of errors
Ensuring systems operate continuously
Keeping information and communications private
Ensuring data remains associated with its creator
Which term refers to the security goal of ensuring data remains associated with its creator?
Integrity
Non-repudiation
Availability
Confidentiality
What does the National Institute of Standards and Technology (NIST) do?
Develops computer security standards and publishes best practice guides
Provides funding for cybersecurity startups
Offers online courses in cybersecurity
Manufactures security hardware
What is the purpose of security controls?
To increase system speed
To mitigate vulnerabilities and ensure CIA
To enhance user interface design
To reduce software costs
What is the purpose of a gap analysis?
To measure the difference between current and desired states in a project
To identify security vulnerabilities in a system
To track user activity in a network
To determine user access rights
What does identity and access management (IAM) provide?
Data encryption and decryption
Identification, authentication, and authorization mechanisms
Network traffic monitoring
System performance optimization
What is the process of identification in access control?
Validating a user's credentials
Issuing a user account to the correct person
Determining user access rights
Monitoring user activity
What is the role of authentication in security?
To encrypt data
To validate an entity's unique credentials
To monitor network traffic
To manage user permissions
What does authorization determine in access control?
The encryption method used
The rights and privileges a user has
The network speed
The type of data stored
What is the function of accounting in security?
Encrypting data
Tracking authorized usage and alerting unauthorized use
Managing user permissions
Optimizing system performance
What does the authentication, authorization, and accounting (AAA) model ensure?
Data encryption
Centralized verification and audit trail creation
Network speed optimization
System performance monitoring
What is the role of the control plane in zero trust architecture?
Encrypting data
Defining policy and determining access decisions
Monitoring network traffic
Managing user accounts
What do permissions control in a security setting?
Network speed
Access to objects including file system items and network resources
Data encryption methods
System performance
What is a characteristic of discretionary access control (DAC)?
Resources are protected by system-defined rules
Each resource is protected by an access control list managed by the owner
Access is granted based on user roles
Resources are encrypted by default
What defines mandatory access control (MAC)?
User-defined access rules
Inflexible, system-defined rules
Role-based access permissions
Dynamic access adjustments
What is Role-based access control (RBAC)?
An access control model where resources are protected by ACLs and managed by administrators based on job functions.
A model that evaluates a set of attributes to determine access.
A nondiscretionary access control technique based on operational rules.
A process of deploying an account to a production environment.
What is the purpose of a group account?
To evaluate a set of attributes for access.
To establish file permissions and user rights for many individuals needing the same level of access.
To deploy an account to a production environment.
To identify the physical location of an object.
What does Attribute-based access control (ABAC) evaluate?
The physical location of an object.
A set of attributes each subject possesses to determine access.
The value assigned to an account by Windows.
The process of removing an account from a production environment.
What is the principle of Least privilege?
Allocating the maximum necessary rights and privileges.
Allocating the minimum necessary rights, privileges, or information to perform a role.
Deploying an account to a production environment.
Identifying the physical location of an object.
What is the process of Provisioning?
Removing an account from a production environment.
Deploying an account, host, or application to a target production environment with credentials and access permissions.
Evaluating a set of attributes for access.
Identifying the physical location of an object.
What is the purpose of a time-of-day restrictions policy?
To enhance device performance
To limit a user's access to resources
To increase network speed
To provide data encryption
Which of the following is NOT a fundamental security concept mentioned in the CompTIA Security+ SYO-701 objectives?
Confidentiality, Integrity, and Availability (CIA)
Non-repudiation
Zero trust
Data encryption
What is included in the Zero Trust model under the control plane?
Implicit trust zones
Adaptive identity
Identity proofing
Access controls
Which of the following is a mitigation technique used to secure the enterprise?
Data encryption
Access control
Network segmentation
Firewall configuration
What is involved in implementing and maintaining identity and access management?
Data encryption
Network monitoring
Provisioning/de-provisioning user accounts
Software updates
Which of the following is an example of an access control model?
Mandatory
Encryption
Firewall
Antivirus
What is a factor used in multifactor authentication?
Something you know
A password manager
A firewall
An antivirus software
Which of the following is a type of authentication token?
Hard/soft authentication tokens
Password manager
Encryption key
Firewall rule
What is an element of effective security governance?
Information security policies
Antivirus software
Firewall configuration
Password length
What is multi-factor authentication (MFA)?
An authentication scheme that requires only one factor
A method that uses a password only
An authentication scheme that requires at least two different factors
A system that uses only biometric data
Which of the following is an example of a "something you have" authentication type?
Password
Smart card
Fingerprint
Voice recognition
What is a personal identification number (PIN) used for in authentication?
To store biometric data
To be shared with others for access
To be used in conjunction with authentication devices like smart cards
To replace passwords entirely
What is a hard authentication token?
A password stored on a server
An authentication token generated by a cryptoprocessor on a dedicated hardware device
A biometric scanner
A simple key card
What is a one-time password (OTP)?
A password that is used for multiple sessions
A password that is generated for use in one specific session and becomes invalid after the session ends
A password that is stored permanently
A password that is shared among users
What is a security key used for?
Single-factor authentication
Multi-factor authentication
Password storage
Data encryption
What does a soft authentication token involve?
A physical key
A password manager
An OTP sent to a registered number or email account
A biometric scan
What is the main feature of a passwordless authentication scheme?
It uses only passwords
It uses ownership and biometric factors, but not knowledge factors
It requires a security question
It relies on email verification
What is the purpose of attestation in authentication?
To encrypt data
To prove that a device or computer is a trustworthy platform
To store user passwords
To manage network traffic
What is NT LAN Manager (NTLM) authentication?
A password storage system
A challenge-response authentication protocol created by Microsoft
A data encryption method
A network monitoring tool
What is a pluggable authentication module (PAM)?
A hardware device for authentication
A framework for implementing authentication providers in Linux
A type of password manager
A network security protocol
What is the function of a directory service?
To encrypt files
To store identity information about all the objects in a particular network
To manage email accounts
To monitor network traffic
What does Lightweight Directory Access Protocol (LDAP) do?
Encrypts data
Accesses network directory databases to store information about authorized users
Manages network traffic
Provides internet access
What is a distinguished name (DN) in a directory?
A type of password
A collection of attributes that define a unique identifier for any given resource within an X.500-like directory
A network protocol
A data encryption method
What is single sign-on (SSO) technology?
A method to encrypt data
A technology that enables a user to authenticate once and receive authorizations for multiple services
A password storage system
A network monitoring tool
What is Kerberos?
A single sign-on authentication and authorization service based on a time-sensitive, ticket-granting system.
A file format that uses attribute-value pairs.
An XML-based web services protocol.
A standardized, stateless architectural style.
What does a Key Distribution Center (KDC) do in Kerberos?
It authenticates users and issues tickets (tokens).
It provides a shared login capability.
It is used to exchange authentication information.
It defines configurations in a structure.
What is a Ticket Granting Ticket (TGT) in Kerberos?
A token issued to an authenticated account to allow access to authorized application servers.
A service that holds the user account and performs authentication.
A protocol used to exchange messages.
A file format for attribute-value pairs.
What is the purpose of Federation in identity management?
To provide a shared login capability across multiple systems and enterprises.
To authenticate users and issue tickets.
To define configurations in a structure.
To perform a biometric scan.
What role does an Identity Provider (IdP) play in a federated network?
It holds the user account and performs authentication.
It issues tickets to users.
It is used to exchange authentication information.
It defines configurations in a structure.
What is Security Assertion Markup Language (SAML)?
An XML-based data format used to exchange authentication information between a client and a service.
A protocol used to exchange messages.
A file format for attribute-value pairs.
A standardized, stateless architectural style.
What is Simple Object Access Protocol (SOAP)?
An XML-based web services protocol that is used to exchange messages.
A file format for attribute-value pairs.
A standardized, stateless architectural style.
A biometric authentication mechanism.
What is Representational State Transfer (REST)?
A standardized, stateless architectural style used by web applications for communication and integration.
A protocol used to exchange messages.
A file format for attribute-value pairs.
An authentication mechanism using biometrics.
What is Open Authorization (OAuth)?
A standard for federated identity management, allowing resource servers or consumer sites to work with user accounts created and managed on a separate identity provider.
A protocol used to exchange messages.
A file format for attribute-value pairs.
An XML-based data format.
What is JavaScript Object Notation (JSON)?
A file format that uses attribute-value pairs to define configurations in a structure that is easy for both humans and machines to read and consume.
An XML-based data format.
A protocol used to exchange messages.
A biometric authentication mechanism.
What is biometric authentication?
An authentication mechanism that allows a user to perform a biometric scan to operate an entry or access system.
A file format for attribute-value pairs.
A protocol used to exchange messages.
A standardized, stateless architectural style.
What does the False Rejection Rate (FRR) measure in biometric systems?
A biometric assessment metric that measures the number of valid subjects who are denied access.
A biometric assessment metric that measures the number of unauthorized users who are mistakenly allowed access.
A biometric evaluation factor expressing the point at which FAR and FRR meet.
A metric indicating the speed of biometric processing.
What is the False Acceptance Rate (FAR) in biometric systems?
A biometric assessment metric that measures the number of unauthorized users who are mistakenly allowed access.
A biometric assessment metric that measures the number of valid subjects who are denied access.
A biometric evaluation factor expressing the point at which FAR and FRR meet.
A metric indicating the accuracy of biometric data storage.
Which of the following is NOT a component of the CIA triad in security concepts?
Confidentiality
Integrity
Availability
Non-repudiation
What is the purpose of the Zero Trust model in security?
To ensure implicit trust zones and policy enforcement points.
To allow unrestricted access to all users.
To focus solely on external threats.
To eliminate the need for authentication.
Which of the following is NOT a type of access control mentioned in the document?
Mandatory
Discretionary
Biometric
Role-based
What is an example of a factor used in multi-factor authentication?
Something you know
Something you eat
Something you see
Something you hear
Which of the following is a component of effective security governance?
User interface design
Information security policies
Network speed
Software updates
What is the definition of Authorization?
Granting a user the right to use a resource on a computer system.
A collection of access control entries.
Access rights that are cumulative.
Permissions that always override Allow permissions.
What does an Access Control List (ACL) determine?
The right to use a resource.
Which users are allowed or denied access to an object.
Cumulative access rights.
Permissions that override Allow permissions.
What are Effective Permissions?
Granting a user the right to use a resource.
A collection of access control entries.
Cumulative access rights from multiple groups.
Permissions that always override Allow permissions.
What do Deny Permissions do?
Grant a user the right to use a resource.
Determine which users are allowed or denied access.
Override Allow permissions.
Provide cumulative access rights.
What does ACL stand for in the context of access control?
Access Control List
Access Configuration Log
Application Control Layer
Authentication Control Level
Which of the following is a method of access control that involves assigning permissions?
Discretionary Access Control
Mandatory Access Control
Role-based Access Control
Single Sign-On
What does SSO stand for in identity and access management?
Single Sign-On
Secure Sign-Off
System Security Operations
Simple Security Option
