Authentication & Access Control

Q1. What are the three main factors of authentication?

1. A.Name, address, phone within enterprise security environments
2. B.Hardware, software, firmware within enterprise security environments
3. C.Username, password, email within enterprise security environments
4. D.Something you know, something you have, something you are✓ Correct

Report an error in this question

Q2. What is a biometric authentication method?

1. A.Authenticating identity using a traditional password or passphrase
2. B.Using physical characteristics like fingerprints or facial recognition to verify identity✓ Correct
3. C.Using a smart card hardware token for two-factor authentication
4. D.Using a numeric PIN code for verifying user identity at login

Report an error in this question

Q3. What is multi-factor authentication (MFA)?

1. A.Using multiple different passwords for one account
2. B.Using two or more different verification methods to confirm identity✓ Correct
3. C.Displaying multiple login screens for a single service
4. D.Using multiple different usernames for one account

Report an error in this question

Q4. What is the purpose of a username?

1. A.To speed up computer processing performance speed
2. B.To identify a specific user account in a system✓ Correct
3. C.To create automated backup copies of user data
4. D.To encrypt data using symmetric cipher algorithms

Report an error in this question

Q5. What is role-based access control (RBAC)?

1. A.Access permissions assigned based on a user's role within the organization✓ Correct
2. B.No formal access control mechanism exists in the system
3. C.Everyone has the same unrestricted access to resources
4. D.Access is assigned randomly without specific criteria

Report an error in this question

Q6. What is a PIN (Personal Identification Number)?

1. A.A numeric password used to authenticate a user's identity✓ Correct
2. B.A symmetric key data encryption algorithm
3. C.A network identifier assigned to connected devices
4. D.A physical metal pin used for hardware components

Report an error in this question

Q7. What is a one-time password (OTP)?

1. A.A shared password used by multiple user accounts
2. B.A permanent password that never expires or changes
3. C.A password valid for only one login session or transaction✓ Correct
4. D.A master password that unlocks all system accounts

Report an error in this question

Q8. What is authorization?

1. A.Permanently deleting files and data from the system storage drives
2. B.Determining what resources and actions an authenticated user is allowed to access✓ Correct
3. C.Creating and provisioning a new user account entry in the directory
4. D.Verifying and confirming who you are as a user during the login process

Report an error in this question

Q9. What is account lockout?

1. A.Normally logging out of an active and authenticated user session
2. B.A security mechanism that locks an account after too many failed login attempts✓ Correct
3. C.Permanently deleting and removing a user account from the system
4. D.Changing a user account password for improved security posture

Report an error in this question

Q10. What is single sign-on (SSO)?

1. A.An authentication scheme allowing a user to log in once and access multiple systems✓ Correct
2. B.A next-generation firewall for filtering network traffic flows
3. C.Creating a single user account for system administration
4. D.Using one password for everything without variation

Report an error in this question

Q11. What is privilege escalation?

1. A.Installing new software applications on the system
2. B.Gaining elevated access rights beyond what was initially authorized✓ Correct
3. C.Receiving a job promotion or advancement opportunity
4. D.Creating a new user account with default permissions

Report an error in this question

Q12. What is the difference between authentication and authorization?

1. A.Neither process is used in modern security frameworks
2. B.Authentication verifies identity, authorization determines permissions✓ Correct
3. C.Authorization always comes before the authentication phase
4. D.They are functionally identical frameworks with no differences

Report an error in this question

Q13. What is a federated identity?

1. A.A physical security measure for protecting building infrastructure
2. B.A fake identity created for fraudulent purposes used in enterprise computing environments
3. C.A temporary identity assigned for a single session used in enterprise computing environments
4. D.A system allowing users to use the same identity credentials across multiple organizations✓ Correct

Report an error in this question

Q14. What is the purpose of a RADIUS server?

1. A.To provide centralized authentication, authorization, and accounting for network access✓ Correct
2. B.To measure and calculate distances between network nodes and management
3. C.To increase and optimize overall network throughput speed
4. D.To create and deploy enterprise wireless network infrastructure

Report an error in this question

Q15. What is LDAP used for in access control?

1. A.A file format used for structured data storage for managing enterprise data resources
2. B.A high-level language used for development within modern computing environments
3. C.A software application used for enterprise computing operations
4. D.A protocol for accessing distributed directory information services for centralized authentication✓ Correct

Report an error in this question

Q16. What is attribute-based access control (ABAC)?

1. A.Access control decisions based solely on user age and demographics
2. B.Access control evaluating attributes of users, resources, actions, and environment✓ Correct
3. C.Randomized access control without any defined criteria or policies
4. D.Access control based on file system attributes exclusively without context

Report an error in this question

Q17. What is Kerberos authentication protocol?

1. A.A software application used for enterprise computing operations
2. B.A ticket-based network authentication protocol using symmetric key cryptography and a trusted third party✓ Correct
3. C.A standard web browser for accessing internet sites within modern computing environments
4. D.A standard network communication protocol for data transmission

Report an error in this question

Q18. What is the purpose of access control matrices?

1. A.To define access rights of subjects to objects in a structured format✓ Correct
2. B.To encrypt data using symmetric cipher algorithms
3. C.To compress files for reducing disk storage consumption
4. D.To create and format data management spreadsheets

Report an error in this question

Q19. What is the difference between RBAC and ABAC in scalability?

1. A.Neither is scalable within enterprise security environments
2. B.RBAC is always more scalable regardless of the specific situation or context
3. C.ABAC is more scalable for complex environments as it uses attributes rather than requiring new roles✓ Correct
4. D.They scale identically with no meaningful distinction between them

Report an error in this question

Q20. What is the purpose of session management in authentication?

1. A.To schedule tasks within enterprise computing infrastructure
2. B.To securely maintain a user's authenticated state throughout their interaction✓ Correct
3. C.To manage network sessions across the enterprise network infrastructure
4. D.To manage computer memory within enterprise computing infrastructure

Report an error in this question

Q21. What is SAML (Security Assertion Markup Language)?

1. A.A high-level language used for development within modern computing environments
2. B.A software application used for enterprise computing operations
3. C.An XML-based standard for exchanging authentication and authorization data between providers✓ Correct
4. D.A database management system for storing structured records

Report an error in this question

Q22. What is adaptive authentication?

1. A.A biometric method within enterprise computing environments
2. B.An approach adjusting security requirements based on risk factors like location and behavior✓ Correct
3. C.A credential management mechanism for user authentication flows
4. D.Fixed authentication rules within enterprise security environments

Report an error in this question

Q23. What is continuous authentication?

1. A.Logging into the system repeatedly at regular intervals across computing environments
2. B.A type of multi-factor authentication using OTP tokens used in enterprise computing environments
3. C.Continuously verifying identity throughout a session using behavioral biometrics and contextual signals✓ Correct
4. D.A session timeout feature that logs users out within the identity management system

Report an error in this question

Q24. What is the OAuth 2.0 authorization code flow?

1. A.A flow where the client receives an authorization code exchanged for tokens via a back-channel✓ Correct
2. B.A file transfer process within enterprise computing environments
3. C.A simple password exchange within the identity management system
4. D.A database query method for managing enterprise data resources

Report an error in this question

Q25. What is just-in-time (JIT) access provisioning?

1. A.A type of SSO used across multiple services within enterprise computing environments
2. B.Permanent access granted for all users regardless of the specific situation or context
3. C.Fast login systems used for authentication within enterprise security environments
4. D.Granting privileged access only when needed for a specific duration, then automatically revoking it✓ Correct

Report an error in this question

Q26. What is the purpose of Privileged Access Management (PAM)?

1. A.To create user accounts for enterprise computing environments
2. B.To manage email accounts within enterprise computing infrastructure
3. C.To secure, manage, and monitor privileged accounts and access to critical systems✓ Correct
4. D.To design websites for enterprise computing environments and management

Report an error in this question

Q27. What is claim-based identity?

1. A.A type of insurance policy covering liability damages used in enterprise computing environments
2. B.Using assertions about a user made by a trusted identity provider for authentication and authorization✓ Correct
3. C.A file management system for organizing stored documents used in enterprise computing environments
4. D.Filing legal claims in a court of law or tribunal within enterprise security environments

Report an error in this question

Q28. What is certificate-based authentication?

1. A.A training certification program for development used in enterprise computing environments
2. B.Using digital certificates (X.509) to verify identity, preferred for machine-to-machine communication✓ Correct
3. C.A structured file format used for data storage and exchange
4. D.Using paper certificates for physical identity verification

Report an error in this question

Q29. What is the FIDO2 authentication standard?

1. A.A passwordless authentication standard using public-key cryptography with hardware authenticators✓ Correct
2. B.A standard network communication protocol for data transmission
3. C.A credential management mechanism for user authentication flows
4. D.A file format used for structured data storage for managing enterprise data resources

Report an error in this question

Q30. What is a pass-the-hash attack?

1. A.A hashing algorithm used for data integrity within enterprise computing environments
2. B.Sharing passwords openly across teams within enterprise security environments for access
3. C.A credential management mechanism designed for enterprise user authentication flows
4. D.An attack where captured password hashes are used directly to authenticate without knowing the password✓ Correct

Report an error in this question