Question 1

Compare one-factor and multiple-factor authentication.

Accepted Answer

Authentication techniques range from a one-factor simple log-on action. This action identifies users based on something that only the user knows such as a password. A multiple-factor authentication may additionally require something that the user has, such as public key certificates, biometrics, and secure hardware tokens.

Question 2

Match between columns
                        Premises: a traditional authentication method for Windows operating systems using a simple challenge response protocol
protocol that picks one of the available authentication methods for a system
the core authentication class in JAAS
a framework for authentication and authorization in Internet protocols
divides authentication into the authentication interface library, and the actual authentication mechanism-specific modules
a place where a number of services are being offered
a feature that enables users to access resources over the network without having to repeatedly supply their credentials
retrieves and makes available NT security information for the current user
allows fine-grained control over the mapping between access control and tasks performed in the deployment area

Accepted Answer

The Answer of PAM and LoginContext and NTSystem PAM and is...

Question 3

Authentication in JAAS is performed in a pluggable and stackable fashion. It is based on a concept called the ___________________ framework.

Accepted Answer

PAM (pluggable authentication module),PAM,pluggable authentication module,pluggable authentication module (PAM)

Question 4

What are the main goals of JAAS?

Accepted Answer

JAAS has two main goals: to provide auth

Question 5

____ authentication is usually used with lightweight directory access protocol (LDAP) and Web authentication that transmits credentials across the network as an MD5 hash or message digest.

Accepted Answer

A)  Passport 
B)  Digest 
C)  Kerberos 
D)  NTLM 
A)  Passport 
B)  Digest 
C)  Kerberos 
D)  NTLM

Question 6

What are some of the benefits of using pluggable authentication modules?

Accepted Answer

PAM divides authentication into the auth

Question 7

The ____ PAM module provides a JAAS login module that prompts for a keystore alias and populates the subject with the alias's principal and credentials.

Accepted Answer

A)  NTLoginModule 
B)  SolarisLoginModule 
C)  UnixLoginModule 
D)  KeyStoreLoginModule 
A)  NTLoginModule 
B)  SolarisLoginModule 
C)  UnixLoginModule 
D)  KeyStoreLoginModule

Question 8

What are the general steps performed when authenticating a Subject in JAAS?

Accepted Answer

The following general steps are performe

Question 9

Java 2 provides access controls based on where the code originated from and who signed the code.

Accepted Answer

A) True 
 B)False

Question 10

____________________ is concerned with what an identity is allowed to do.

Accepted Answer

The answer of ____________________ is concerned with what an identity...

Question 11

The JAAS framework defines the term ____ to represent the requester for a service.

Accepted Answer

A)  resource 
B)  credential 
C)  subject 
D)  principal 
A)  resource 
B)  credential 
C)  subject 
D)  principal

Question 12

A good authentication technology should be platform and system dependent.

Accepted Answer

A) True 
 B)False

Question 13

With ____, authorization is implemented by allowing the administrator to control which users or groups have the right to perform various administrative functions or to take any action that affects systemwide resources.

Accepted Answer

A)  administrative privileges 
B)  permissions inheritance 
C)  user-based authorization 
D)  discretionary access to securable objects 
A)  administrative privileges 
B)  permissions inheritance 
C)  user-based authorization 
D)  discretionary access to securable objects

Question 14

Briefly describe authorization.

Accepted Answer

Authorization picks up where authenticat

Question 15

Does a "good" authentication technology that is platform/system independent and provides SSO exist today? Explain your answer.

Accepted Answer

Unfortunately, the answer is no. Over th

Question 16

Briefly describe the Refreshable interface.

Accepted Answer

The javax.security.auth.Refreshable inte

Question 17

____________________ is a list attached to an object in a system. It consists of control expressions, each of which grants or denies some ability to a particular user or group of users.

Accepted Answer

ACL (Access control

Question 18

The ____ PAM module prompts for a username and password. It then verifies the password against the password stored in a directory service configured using Java naming and directory interface (JNDI).

Accepted Answer

A)  JndiLoginModule 
B)  KeyStoreLoginModule 
C)  SolarisLoginModule 
D)  UnixLoginModule 
A)  JndiLoginModule 
B)  KeyStoreLoginModule 
C)  SolarisLoginModule 
D)  UnixLoginModule

Question 19

____ authentication is an industry standard documented under RFC 1510 that is used with either a password or a smart card for interactive log on.

Accepted Answer

A)  Kerberos 
B)  NTLM 
C)  LDAP 
D)  Digest 
A)  Kerberos 
B)  NTLM 
C)  LDAP 
D)  Digest

Question 20

The ____ PAM module retrieves and makes available Solaris UID/GID/groups information for the current user.

Accepted Answer

A)  NTLoginModule 
B)  SolarisSystem 
C)  UnixLoginModule 
D)  KeyStoreLoginModule 
A)  NTLoginModule 
B)  SolarisSystem 
C)  UnixLoginModule 
D)  KeyStoreLoginModule

Compare one-factor and multiple-factor authentication.

Authentication in JAAS is performed in a pluggable and stackable fashion. It is based on a concept called the ___________________ framework.

What are the main goals of JAAS?

____ authentication is usually used with lightweight directory access protocol (LDAP) and Web authentication that transmits credentials across the network as an MD5 hash or message digest.

What are some of the benefits of using pluggable authentication modules?

The ____ PAM module provides a JAAS login module that prompts for a keystore alias and populates the subject with the alias's principal and credentials.

What are the general steps performed when authenticating a Subject in JAAS?

Java 2 provides access controls based on where the code originated from and who signed the code.

____________________ is concerned with what an identity is allowed to do.

The JAAS framework defines the term ____ to represent the requester for a service.

A good authentication technology should be platform and system dependent.

With ____, authorization is implemented by allowing the administrator to control which users or groups have the right to perform various administrative functions or to take any action that affects systemwide resources.

Briefly describe authorization.

Does a "good" authentication technology that is platform/system independent and provides SSO exist today? Explain your answer.

Briefly describe the Refreshable interface.

____________________ is a list attached to an object in a system. It consists of control expressions, each of which grants or denies some ability to a particular user or group of users.

The ____ PAM module prompts for a username and password. It then verifies the password against the password stored in a directory service configured using Java naming and directory interface (JNDI).

____ authentication is an industry standard documented under RFC 1510 that is used with either a password or a smart card for interactive log on.

The ____ PAM module retrieves and makes available Solaris UID/GID/groups information for the current user.

Introduction to Security Concepts

Software Engineering and Security

Essential Public Key Infrastructure

Trust and Threat Model

Java Programming Security

Java Api-Level Security Features

Secure Programming With C and Openssl

Secure Programming With Perl

Identity Management

Security Topics

Filters

Exam 7: Authentication and Authorization With Java

Compare one-factor and multiple-factor authentication.

Authentication in JAAS is performed in a pluggable and stackable fashion. It is based on a concept called the ___________________ framework.

What are the main goals of JAAS?

____ authentication is usually used with lightweight directory access protocol (LDAP) and Web authentication that transmits credentials across the network as an MD5 hash or message digest.

What are some of the benefits of using pluggable authentication modules?

The ____ PAM module provides a JAAS login module that prompts for a keystore alias and populates the subject with the alias's principal and credentials.

What are the general steps performed when authenticating a Subject in JAAS?

Java 2 provides access controls based on where the code originated from and who signed the code.

____________________ is concerned with what an identity is allowed to do.

The JAAS framework defines the term ____ to represent the requester for a service.

A good authentication technology should be platform and system dependent.

With ____, authorization is implemented by allowing the administrator to control which users or groups have the right to perform various administrative functions or to take any action that affects systemwide resources.

Briefly describe authorization.

Does a "good" authentication technology that is platform/system independent and provides SSO exist today? Explain your answer.

Briefly describe the Refreshable interface.

____________________ is a list attached to an object in a system. It consists of control expressions, each of which grants or denies some ability to a particular user or group of users.

The ____ PAM module prompts for a username and password. It then verifies the password against the password stored in a directory service configured using Java naming and directory interface (JNDI).

____ authentication is an industry standard documented under RFC 1510 that is used with either a password or a smart card for interactive log on.

The ____ PAM module retrieves and makes available Solaris UID/GID/groups information for the current user.

Introduction to Security Concepts

Software Engineering and Security

Essential Public Key Infrastructure

Trust and Threat Model

Java Programming Security

Java Api-Level Security Features

Secure Programming With C and Openssl

Secure Programming With Perl

Identity Management

Security Topics

Filters