Exam 2: Access Control

Smart cards are less expensive to implement than memory cards.

What defines the method for identifying and authenticating users and the level of access that is granted to users?

Passwords are considered weaker than passphrases.

Type I errors are more dangerous than Type II errors.

When considering FAR, FRR, and CER, smaller values are better.

Pharming and phishing are password attacks.

A network-based IDS is the most common IDS and monitors network traffic on a local network segment.

Which of the following are physical access controls?

Which of the following is an example of three-factor authentication?

A deny-by-default stance is less strict than an allow-by-default stance.

Knowledge factor authentication is also referred to as Type I authentication factor.

Content-dependent access control is based on subject or object attributes or environmental characteristics.

Of the options given, which biometric consideration is MOST important?

In which access control category do fire extinguishers fall?

Which type of IDS analyzes traffic and compares it to normal traffic to determine whether said traffic is a threat?

In which access control model is all that is not expressly permitted is forbidden?

Which malicious software collects private user data?

Which accountability mechanism reviews facility and perimeter protections?

Retina scans have a higher accuracy than any other biometric scan.

Which concept ensures that data is protected from unauthorized modification or data corruption?