Exam 5: Access Control

If Directory Server A trusts Directory Server B, Directory Server B trusts Directory Server C, and Directory Server A trusts Directory Server C, this is ________ trust.

The most widely used form of biometrics is ________.

A false rejection occurs when a person is improperly matched to a template.

In Kerberos, the verifier is explicitly notified that the supplicant has been authenticated.

Which of the following are benefits of using identity management?

In high-risk environments, password reset risks are reduced by requiring the user's physical presence.

The standard for sending security assertions is ________.

Directory servers from different vendors are synchronized through ________.

When an attacker deliberately attempts to fool the system, this is called ________.

________ often get their authentication information from ________.

If Directory Server A trusts Directory Server Band Directory Server B trusts Directory Server A, this is ________ trust.

The book recommends that passwords be at least ________ characters long.

________ servers synchronize directory servers from different vendors.

It is very important for testers to get permission before running a password cracking program on their company's computers to check for weak passwords even if such testing is in their job definitions.

Long passwords that use several types of keyboard characters are called ________ passwords.

When assigning initial permissions, it is good to give the least permissions believed to be necessary and then add permissions if appropriate.

If a firewall lacks the processing power to handle incoming traffic, it will drop any packets it cannot process. This is ________.

A security assertion may contain ________.

________ is the process of assessing the identity of each individual claiming to have permission to use a resource.

A ________ is a small device with a display that has a number that changes frequently.