Question 1

The verifier itself determines the identity of the supplicant in ________.

Accepted Answer

A)  verification 
B)  identification 
C)  Both A and B 
D)  Neither A nor B 
A)  verification 
B)  identification 
C)  Both A and B 
D)  Neither A nor B

Question 2

A firm can be its own certificate authority for internal users.

Accepted Answer

A) True 
 B)False

Question 3

In military security, SBU documents are unclassified.

Accepted Answer

A) True 
 B)False

Question 4

If Directory Server A trusts Directory Server B and Directory Server B trusts Directory Server C then Directory Server A MUST trust Directory Server C.

Accepted Answer

A) True 
 B)False

Question 5

A ________ does not require a special reader to be added to a PC for access control.

Accepted Answer

A)  USB token 
B)  magnetic stripe card 
C)  smart card 
D)  All of the above 
A)  USB token 
B)  magnetic stripe card 
C)  smart card 
D)  All of the above

Question 6

In the context of PKI, ________ is the process of accepting public keys and providing new digital certificates to the users.

Accepted Answer

A)  provisioning 
B)  reflection 
C)  coordination 
D)  certification 
A)  provisioning 
B)  reflection 
C)  coordination 
D)  certification

Question 7

Because fingerprint scanning is often deceived, it should never be used as a security measure.

Accepted Answer

A) True 
 B)False

Question 8

Which of the following is true?

Accepted Answer

A)  Human password resets are dangerous. 
B)  Automated password resets are dangerous. 
C)  Both A and B 
D)  Neither A nor B 
A)  Human password resets are dangerous. 
B)  Automated password resets are dangerous. 
C)  Both A and B 
D)  Neither A nor B

Question 9

Hand geometry recognition is used heavily for ________.

Accepted Answer

A)  PC access 
B)  watch list access 
C)  door access 
D)  server access 
A)  PC access 
B)  watch list access 
C)  door access 
D)  server access

Question 10

In Kerberos, the Kerberos server sends the Service Ticket directly to the supplicant rather than directly to the verifier.

Accepted Answer

A) True 
 B)False

Question 11

A ________ card is an access card that has a built-in microprocessor and memory.

Accepted Answer

A)  magnetic stripe 
B)  smart 
C)  Both A and B 
D)  Neither A nor B 
A)  magnetic stripe 
B)  smart 
C)  Both A and B 
D)  Neither A nor B

Question 12

Which of the following statements accurately describes iris recognition?

Accepted Answer

A)  Iris recognition has high FARs. 
B)  Iris recognition technology is expensive. 
C)  Iris recognition scans the eye with lasers. 
D)  All of the above 
A)  Iris recognition has high FARs. 
B)  Iris recognition technology is expensive. 
C)  Iris recognition scans the eye with lasers. 
D)  All of the above

Question 13

XML makes SAML platform-dependent.

Accepted Answer

A) True 
 B)False

Question 14

Which of the following is not one of the AAA controls?

Accepted Answer

A)  Authentication 
B)  Auditing 
C)  Accuracy 
D)  Authorizations 
A)  Authentication 
B)  Auditing 
C)  Accuracy 
D)  Authorizations

Question 15

In directory servers, information is organized ________.

Accepted Answer

A)  hierarchically 
B)  rhizomatically 
C)  relationally 
D)  None of the above 
A)  hierarchically 
B)  rhizomatically 
C)  relationally 
D)  None of the above

Question 16

Two-factor authentication can be defeated if ________.

Accepted Answer

A)  the user's computer is compromised 
B)  the attacker uses a man-in-the-middle attack 
C)  Both A and B 
D)  Neither A nor B 
A)  the user's computer is compromised 
B)  the attacker uses a man-in-the-middle attack 
C)  Both A and B 
D)  Neither A nor B

Question 17

In Kerberos, the ________ is sent from the Kerberos server to the supplicant.

Accepted Answer

A)  ticket granting ticket 
B)  service ticket 
C)  Both A and B 
D)  Neither A nor B 
A)  ticket granting ticket 
B)  service ticket 
C)  Both A and B 
D)  Neither A nor B

Question 18

In federated identity management, firms do not query one another's identity management databases.

Accepted Answer

A) True 
 B)False

Question 19

Passwords offer reasonable security at reasonable cost and will likely continue to increase in importance in the future.

Accepted Answer

A) True 
 B)False

Question 20

A false acceptance occurs when a person is improperly matched to a template.

Accepted Answer

A) True 
 B)False

The verifier itself determines the identity of the supplicant in ________.

A firm can be its own certificate authority for internal users.

In military security, SBU documents are unclassified.

If Directory Server A trusts Directory Server B and Directory Server B trusts Directory Server C then Directory Server A MUST trust Directory Server C.

A ________ does not require a special reader to be added to a PC for access control.

In the context of PKI, ________ is the process of accepting public keys and providing new digital certificates to the users.

Because fingerprint scanning is often deceived, it should never be used as a security measure.

Which of the following is true?

Hand geometry recognition is used heavily for ________.

In Kerberos, the Kerberos server sends the Service Ticket directly to the supplicant rather than directly to the verifier.

A ________ card is an access card that has a built-in microprocessor and memory.

Which of the following statements accurately describes iris recognition?

XML makes SAML platform-dependent.

Which of the following is not one of the AAA controls?

In directory servers, information is organized ________.

Two-factor authentication can be defeated if ________.

In Kerberos, the ________ is sent from the Kerberos server to the supplicant.

In federated identity management, firms do not query one another's identity management databases.

Passwords offer reasonable security at reasonable cost and will likely continue to increase in importance in the future.

A false acceptance occurs when a person is improperly matched to a template.

The Threat Environment

Planning and Policy

Cryptography

Secure Networks

Firewalls

Host Hardening

Application Security

Data Protection

Incident and Disaster Response

Module A: Networking Concepts

Filters

Exam 5: Access Control

The verifier itself determines the identity of the supplicant in ________.

A firm can be its own certificate authority for internal users.

In military security, SBU documents are unclassified.

If Directory Server A trusts Directory Server B and Directory Server B trusts Directory Server C then Directory Server A MUST trust Directory Server C.

A ________ does not require a special reader to be added to a PC for access control.

In the context of PKI, ________ is the process of accepting public keys and providing new digital certificates to the users.

Because fingerprint scanning is often deceived, it should never be used as a security measure.

Which of the following is true?

Hand geometry recognition is used heavily for ________.

In Kerberos, the Kerberos server sends the Service Ticket directly to the supplicant rather than directly to the verifier.

A ________ card is an access card that has a built-in microprocessor and memory.

Which of the following statements accurately describes iris recognition?

XML makes SAML platform-dependent.

Which of the following is not one of the AAA controls?

In directory servers, information is organized ________.

Two-factor authentication can be defeated if ________.

In Kerberos, the ________ is sent from the Kerberos server to the supplicant.

In federated identity management, firms do not query one another's identity management databases.

Passwords offer reasonable security at reasonable cost and will likely continue to increase in importance in the future.

A false acceptance occurs when a person is improperly matched to a template.

The Threat Environment

Planning and Policy

Cryptography

Secure Networks

Firewalls

Host Hardening

Application Security

Data Protection

Incident and Disaster Response

Module A: Networking Concepts

Filters