Question 1

A ________ card stores authentication data.

Accepted Answer

A)  magnetic stripe 
B)  smart 
C)  Both A and B 
D)  Neither A nor B 
A)  magnetic stripe 
B)  smart 
C)  Both A and B 
D)  Neither A nor B C

Question 2

In military security, the term multilevel security means multifactor security.

Accepted Answer

A) True 
 B)False  False

Question 3

Identity management is really just another form of risk management.

Accepted Answer

A) True 
 B)False  True

Question 4

Compared to access control based on individual accounts, RBAC is ________.

Accepted Answer

A)  less prone to error 
B)  more expensive 
C)  Both A and B 
D)  Neither A nor B 
A)  less prone to error 
B)  more expensive 
C)  Both A and B 
D)  Neither A nor B

Question 5

In Kerberos, the ________ is sent from the Kerberos server to the verifier.

Accepted Answer

A)  ticket granting ticket 
B)  service ticket 
C)  Both A and B 
D)  Neither A nor B 
A)  ticket granting ticket 
B)  service ticket 
C)  Both A and B 
D)  Neither A nor B

Question 6

Biometric authentication is the strongest form of authentication.

Accepted Answer

A) True 
 B)False

Question 7

As far as possible, identities should be managed by people closest to the situation.

Accepted Answer

A) True 
 B)False

Question 8

________ can be much shorter than ________.

Accepted Answer

A)  PINs, passwords 
B)  Passwords, PINs 
C)  There is no general length difference between passwords and PINs. 
D)  None of the above 
A)  PINs, passwords 
B)  Passwords, PINs 
C)  There is no general length difference between passwords and PINs. 
D)  None of the above

Question 9

________ is a form of identification that identifies a person as being a member of a group.

Accepted Answer

A)  RBAC 
B)  Watch list matching 
C)  Group ID matching 
D)  Group acceptance 
A)  RBAC 
B)  Watch list matching 
C)  Group ID matching 
D)  Group acceptance

Question 10

In Kerberos, the ________ is the supplicant's proof that it has already authenticated itself with the Kerberos Server.

Accepted Answer

A)  ticket granting ticket 
B)  service ticket 
C)  Both A and B 
D)  Neither A nor B 
A)  ticket granting ticket 
B)  service ticket 
C)  Both A and B 
D)  Neither A nor B

Question 11

Which of the following statements is true about log files?

Accepted Answer

A)  Log files should be read regularly. 
B)  External auditing should be conducted periodically. 
C)  Automatic alerts should be established. 
D)  All of the above 
A)  Log files should be read regularly. 
B)  External auditing should be conducted periodically. 
C)  Automatic alerts should be established. 
D)  All of the above

Question 12

The ________ gives the verifier a symmetric session key.

Accepted Answer

A)  ticket-granting ticket 
B)  service ticket 
C)  Both A and B 
D)  Neither A nor B 
A)  ticket-granting ticket 
B)  service ticket 
C)  Both A and B 
D)  Neither A nor B

Question 13

During enrollment, the scanner sends ________ to the authentication system.

Accepted Answer

A)  scan data 
B)  key features 
C)  Both A and B 
D)  Neither A nor B 
A)  scan data 
B)  key features 
C)  Both A and B 
D)  Neither A nor B

Question 14

Password cracking is usually done over the network by trying many passwords to log into an account.

Accepted Answer

A) True 
 B)False

Question 15

Verification requires more matches against templates than does identification.

Accepted Answer

A) True 
 B)False

Question 16

________ is the process of assessing the identity of each individual claiming to have permission to use a resource.

Accepted Answer

A)  Authorizations 
B)  Authentication 
C)  Accuracy 
D)  Auditing 
A)  Authorizations 
B)  Authentication 
C)  Accuracy 
D)  Auditing

Question 17

PCs should require login screens with complex passwords.

Accepted Answer

A) True 
 B)False

Question 18

For watch lists of criminals, a false ________ means that an innocent person is identified as a criminal.

Accepted Answer

A)  acceptance 
B)  rejection 
C)  Both A and B 
D)  Neither A nor B 
A)  acceptance 
B)  rejection 
C)  Both A and B 
D)  Neither A nor B

Question 19

In CobiT, entry must be ________.

Accepted Answer

A)  justified 
B)  logged 
C)  Both A and B 
D)  Neither A nor B 
A)  justified 
B)  logged 
C)  Both A and B 
D)  Neither A nor B

Question 20

________ is the process of collecting information about the activities of each individual in log files for immediate and later analysis.

Accepted Answer

A)  Authorizations 
B)  Authentication 
C)  Accuracy 
D)  Auditing 
A)  Authorizations 
B)  Authentication 
C)  Accuracy 
D)  Auditing

A ________ card stores authentication data.

In military security, the term multilevel security means multifactor security.

Identity management is really just another form of risk management.

Compared to access control based on individual accounts, RBAC is ________.

In Kerberos, the ________ is sent from the Kerberos server to the verifier.

Biometric authentication is the strongest form of authentication.

As far as possible, identities should be managed by people closest to the situation.

can be much shorter than .

________ is a form of identification that identifies a person as being a member of a group.

In Kerberos, the ________ is the supplicant's proof that it has already authenticated itself with the Kerberos Server.

Which of the following statements is true about log files?

The ________ gives the verifier a symmetric session key.

During enrollment, the scanner sends ________ to the authentication system.

Password cracking is usually done over the network by trying many passwords to log into an account.

Verification requires more matches against templates than does identification.

________ is the process of assessing the identity of each individual claiming to have permission to use a resource.

PCs should require login screens with complex passwords.

For watch lists of criminals, a false ________ means that an innocent person is identified as a criminal.

In CobiT, entry must be ________.

________ is the process of collecting information about the activities of each individual in log files for immediate and later analysis.

The Threat Environment

Planning and Policy

Cryptography

Secure Networks

Firewalls

Host Hardening

Application Security

Data Protection

Incident and Disaster Response

Module A: Networking Concepts

Filters

Exam 5: Access Control

A ________ card stores authentication data.

In military security, the term multilevel security means multifactor security.

Identity management is really just another form of risk management.

Compared to access control based on individual accounts, RBAC is ________.

In Kerberos, the ________ is sent from the Kerberos server to the verifier.

Biometric authentication is the strongest form of authentication.

As far as possible, identities should be managed by people closest to the situation.

________ can be much shorter than ________.

________ is a form of identification that identifies a person as being a member of a group.

In Kerberos, the ________ is the supplicant's proof that it has already authenticated itself with the Kerberos Server.

Which of the following statements is true about log files?

The ________ gives the verifier a symmetric session key.

During enrollment, the scanner sends ________ to the authentication system.

Password cracking is usually done over the network by trying many passwords to log into an account.

Verification requires more matches against templates than does identification.

________ is the process of assessing the identity of each individual claiming to have permission to use a resource.

PCs should require login screens with complex passwords.

For watch lists of criminals, a false ________ means that an innocent person is identified as a criminal.

In CobiT, entry must be ________.

________ is the process of collecting information about the activities of each individual in log files for immediate and later analysis.

The Threat Environment

Planning and Policy

Cryptography

Secure Networks

Firewalls

Host Hardening

Application Security

Data Protection

Incident and Disaster Response

Module A: Networking Concepts

Filters

can be much shorter than .