Question 1

List the steps for RADIUS authentication with a wireless device in an IEEE 802.1x network.

Accepted Answer

1. A wireless device, called the supplicant (it makes an "appeal" for access), sends a request to an AP requesting permission to join the WLAN. The AP prompts the user for the user ID and password.
2. The AP, serving as the authenticator that will accept or reject the wireless device, creates a data packet from this information called the authentication request.
3. When an authentication request is received, the RADIUS server validates that the request is from an approved AP and then decrypts the data packet to access the username and password information. This information is passed on to the appropriate security user database.
4. If the username and password are correct, the RADIUS server sends an authentication acknowledgment that includes information on the user's network system and service requirements.
5. If accounting is also supported by the RADIUS server, an entry is started in the accounting database.
6. Once the server information is received and verified by the AP, it enables the necessary configuration to deliver the wireless services to the user.

Question 2

Authorization and access are viewed as synonymous and in access control, they are the same step.

Accepted Answer

A) True 
 B)False  False

Question 3

During RADIUS authentication the AP, serving as the authenticator that will accept or reject the wireless device, creates a data packet from this information called the ____.

Accepted Answer

A)  accounting request 
B)  access request 
C)  verification request 
D)  authentication request 
A)  accounting request 
B)  access request 
C)  verification request 
D)  authentication request D

Question 4

A(n) ____ is a set of permissions that are attached to an object.

Accepted Answer

A)  ACE 
B)  DAC 
C)  entity 
D)  ACL 
A)  ACE 
B)  DAC 
C)  entity 
D)  ACL

Question 5

Describe how Kerberos works.

Accepted Answer

Kerberos is typically used when a user a

Question 6

The capability to look up information by name under the X.500 standard is known as a(n) ____________________-pages service.

Accepted Answer

The answer of The capability to look up information by...

Question 7

Discuss the differences between DAP and LDAP.

Accepted Answer

Unlike X.500 DAP, LDAP was designed to r

Question 8

____ accounts are user accounts that remain active after an employee has left an organization.

Accepted Answer

A)  Active 
B)  Stale 
C)  Orphaned 
D)  Fragmented 
A)  Active 
B)  Stale 
C)  Orphaned 
D)  Fragmented

Question 9

A user or a process functioning on behalf of the user that attempts to access an object is known as the ____.

Accepted Answer

A)  subject 
B)  reference monitor 
C)  entity 
D)  label 
A)  subject 
B)  reference monitor 
C)  entity 
D)  label

Question 10

Match between columns
                        Premises: A database stored on the network itself that contains information about users and network devices
The right given to access
Validating credentials as genuine
Granting permission to take an action
A specific resource, such as a file or a hardware device
A review of credentials
Individual to whom day-to-day actions have been assigned
User who accesses information in the course of routine job responsibilities

Accepted Answer

The Answer of Access and End user and Authorization and is...

Question 11

Describe the two key elements of the MAC model.

Accepted Answer

Labels. In a system using MAC, every ent

Question 12

____ is often used for managing user access to one or more systems.

Accepted Answer

A)  Role Based Access Control 
B)  Mandatory Access Control 
C)  Rule Based Access Control 
D)  Discretionary Access Control 
A)  Role Based Access Control 
B)  Mandatory Access Control 
C)  Rule Based Access Control 
D)  Discretionary Access Control

Question 13

In the UAC dialog boxes, the color ____ indicates the lowest risk.

Accepted Answer

A)  red 
B)  gray 
C)  yellow 
D)  green 
A)  red 
B)  gray 
C)  yellow 
D)  green

Question 14

The action that is taken by the subject over the object is called a(n) ____.

Accepted Answer

A)  authorization 
B)  access 
C)  control 
D)  operation 
A)  authorization 
B)  access 
C)  control 
D)  operation

Question 15

In the DAC model, ____________________ can create and access their objects freely.

Accepted Answer

The answer of In the DAC model, ____________________ can create...

Question 16

Entries in the DIB are arranged in a tree structure called the ____.

Accepted Answer

A)  DAP 
B)  PEAP 
C)  EAP 
D)  DIT 
A)  DAP 
B)  PEAP 
C)  EAP 
D)  DIT

Question 17

A(n) ____ model is a standard that provides a predefined framework for hardware and software developers who need to implement access control in their devices or applications.

Accepted Answer

A)  accounting 
B)  user control 
C)  access control 
D)  authorization control 
A)  accounting 
B)  user control 
C)  access control 
D)  authorization control

Question 18

Discuss the two significant weaknesses of DAC.

Accepted Answer

DAC has two significant weaknesses. Firs

Question 19

Describe LDAP injection attacks.

Accepted Answer

A weakness of LDAP is that it can be sub

Question 20

____ indicates when an account is no longer active.

Accepted Answer

A)  Password expiration 
B)  Account expiration 
C)  Last login 
D)  Account last used 
A)  Password expiration 
B)  Account expiration 
C)  Last login 
D)  Account last used

List the steps for RADIUS authentication with a wireless device in an IEEE 802.1x network.

Authorization and access are viewed as synonymous and in access control, they are the same step.

During RADIUS authentication the AP, serving as the authenticator that will accept or reject the wireless device, creates a data packet from this information called the ____.

A(n) ____ is a set of permissions that are attached to an object.

Describe how Kerberos works.

The capability to look up information by name under the X.500 standard is known as a(n) ____________________-pages service.

Discuss the differences between DAP and LDAP.

____ accounts are user accounts that remain active after an employee has left an organization.

A user or a process functioning on behalf of the user that attempts to access an object is known as the ____.

Describe the two key elements of the MAC model.

____ is often used for managing user access to one or more systems.

In the UAC dialog boxes, the color ____ indicates the lowest risk.

The action that is taken by the subject over the object is called a(n) ____.

In the DAC model, ____________________ can create and access their objects freely.

Entries in the DIB are arranged in a tree structure called the ____.

A(n) ____ model is a standard that provides a predefined framework for hardware and software developers who need to implement access control in their devices or applications.

Discuss the two significant weaknesses of DAC.

Describe LDAP injection attacks.

____ indicates when an account is no longer active.

Introduction to Security

Malware and Social Engineering Attacks

Application and Network Attacks

Vulnerability Assessment and Mitigating Attacks

Host, Application, and Data Security

Network Security

Administering a Secure Network

Wireless Network Security

Authentication and Account Management

Basic Cryptography

Advanced Cryptography

Business Continuity

Risk Mitigation

Filters

Exam 9: Access Control Fundamentals

List the steps for RADIUS authentication with a wireless device in an IEEE 802.1x network.

Authorization and access are viewed as synonymous and in access control, they are the same step.

During RADIUS authentication the AP, serving as the authenticator that will accept or reject the wireless device, creates a data packet from this information called the ____.

A(n) ____ is a set of permissions that are attached to an object.

Describe how Kerberos works.

The capability to look up information by name under the X.500 standard is known as a(n) ____________________-pages service.

Discuss the differences between DAP and LDAP.

____ accounts are user accounts that remain active after an employee has left an organization.

A user or a process functioning on behalf of the user that attempts to access an object is known as the ____.

Describe the two key elements of the MAC model.

____ is often used for managing user access to one or more systems.

In the UAC dialog boxes, the color ____ indicates the lowest risk.

The action that is taken by the subject over the object is called a(n) ____.

In the DAC model, ____________________ can create and access their objects freely.

Entries in the DIB are arranged in a tree structure called the ____.

A(n) ____ model is a standard that provides a predefined framework for hardware and software developers who need to implement access control in their devices or applications.

Discuss the two significant weaknesses of DAC.

Describe LDAP injection attacks.

____ indicates when an account is no longer active.

Introduction to Security

Malware and Social Engineering Attacks

Application and Network Attacks

Vulnerability Assessment and Mitigating Attacks

Host, Application, and Data Security

Network Security

Administering a Secure Network

Wireless Network Security

Authentication and Account Management

Basic Cryptography

Advanced Cryptography

Business Continuity

Risk Mitigation

Filters