Exam 10: Authentication and Account Management

____________________ is a decentralized open source FIM that does not require specific software to be installed on the desktop.

A(n) ____ can also capture transmissions that contain passwords.

Although brute force and dictionary attacks were once the primary tools used by attackers to crack an encrypted password, today attackers usually prefer ____.

____ holds the promise of reducing the number of usernames and passwords that users must memorize.

Due to the limitations of online guessing, most password attacks today use ____.

Trusted OSs have been used since the late 1960s, initially for government and military applications.

If a user typically accesses his bank's Web site from his home computer on nights and weekends, then this information can be used to establish a ____ of typical access.

A(n) ____________________ attack begins with the attacker creating encrypted versions of common dictionary words, and then comparing them against those in a stolen password file.

The most common type of authentication today is a(n) ____________________.

____ is using a single authentication credential that is shared across multiple networks.

The weakness of passwords centers on ____.

A ____ is a secret combination of letters, numbers, and/or characters that only the user should know.

____ permits users to share resources stored on one site with a second site without forwarding their authentication credentials to the other site.

Discuss the weaknesses of OpenID.

Discuss the types of shortcuts that users take to help them recall their passwords.

The set of letters, symbols, and characters that make up the password are known as a ____ set.

Token credentials can be revoked at any time by the user without affecting other token credentials issued to other sites.

____ can use fingerprints or other unique characteristics of a person's face, hands, or eyes (irises and retinas) to authenticate a user.

Why do passwords place a heavy load on human memory?

____ attack is where every possible combination of letters, numbers, and characters is used to create encrypted passwords.