Exam 5: Access Control

A person or process that requests access is known as the supplicant.

For group or team work in a company, it is often recommended that all group members share a single account and, therefore, a single password.

Which of the following is FALSE in regard to the comparison of access control to RBAC and individual accounts?

What approximate percentage of calls to help desks involve lost passwords?

Which of the following statements accurately describes fingerprint recognition?

When a reader in a biometric authentication system scans a person's biometric data, what is used?

In federated identity management, firms ________.

When a user is scanned a second time, the reader in a biometric authentication system processes the ________ information to create key features.

Authorizations for individuals can also be referred to as ________.

PKI servers must support the downloading of ________ and must respond to ________ queries.

Which of the following is NOT a part of central authentication servers?

A potential benefit of identity management is ________.

Auditing predicts what a person or program is likely to do in the future.

In following the principle of least permissions, each person should only get the permissions that he or she absolutely needs to do his or her job.

Media such as cameras and mobile phones with cameras in secured areas may allow a physical penetration attacker to steal information.

Which of the following is NOT one of the three major elements of an assertion?

For easy remembering, many companies suggest that you record a PIN that you've selected on the physical access card you've been given.

The OU is a shortcut way of referring to a node.

Magnetic stripe cards are________, only containing data; smart cards are ________.

Typically, military and national security organizations have a multilevel security system.