Question 1

Describe mandatory access control.

Accepted Answer

Mandatory Access Control (MAC) is a requirement in some settings.When used, it is structured and coordinated with both a data classification scheme and a personnel clearance scheme.Users and data owners have little or no control over access to the information resources being controlled by the MAC environment.A MAC will use a data classification scheme that assigns each collection or type of information to a sensitivity level.Each user is also rated with a sensitivity level called a clearance that will specify the level of information he or she may access.

Question 2

RADIUS works with Network Address Translation (NAT).

Accepted Answer

A) True 
 B)False  False

Question 3

____ reduces the chance of an individual violating information security by increasing the scrutiny on any one user.

Accepted Answer

A)  Need to know 
B)  Least privilege 
C)  Access control 
D)  Separation of duties 
A)  Need to know 
B)  Least privilege 
C)  Access control 
D)  Separation of duties D

Question 4

What are the general steps a firewall uses to authenticate users?

Accepted Answer

1.The client makes a request to access a

Question 5

What are the functions that can be used to classify access controls?

Accepted Answer

Preventive-help the organization avoid a

Question 6

Match each item with a statement below.
-Determined by a central authority in the organization.

Accepted Answer

A) authentication 
B) least privilege 
C) discretionary access controls 
D) authorization 
E) separation of duties
F)identification
G)need to know
H)nondiscretionary access controls
I)accountability 
A) authentication 
B) least privilege 
C) discretionary access controls 
D) authorization 
E) separation of duties
F)identification
G)need to know
H)nondiscretionary access controls
I)accountability

Question 7

Physical attributes are an example of something you ____ that can be used to verify identity.

Accepted Answer

A)  know 
B)  have 
C)  are 
D)  do 
A)  know 
B)  have 
C)  are 
D)  do

Question 8

Match each item with a statement below.
-Confirming the identity of the entity seeking access to a logical or physical area

Accepted Answer

A) authentication 
B) least privilege 
C) discretionary access controls 
D) authorization 
E) separation of duties
F)identification
G)need to know
H)nondiscretionary access controls
I)accountability 
A) authentication 
B) least privilege 
C) discretionary access controls 
D) authorization 
E) separation of duties
F)identification
G)need to know
H)nondiscretionary access controls
I)accountability

Question 9

Match each item with a statement below.
-Obtaining the identity of the entity requesting access to a logical or physical area.

Accepted Answer

A) authentication 
B) least privilege 
C) discretionary access controls 
D) authorization 
E) separation of duties
F)identification
G)need to know
H)nondiscretionary access controls
I)accountability 
A) authentication 
B) least privilege 
C) discretionary access controls 
D) authorization 
E) separation of duties
F)identification
G)need to know
H)nondiscretionary access controls
I)accountability

Question 10

You might have to use TACACS+ or ____ if your firewall doesn't support authentication.

Accepted Answer

A)  RADIUS 
B)  Kerberos 
C)  NAT 
D)  digital certificates 
A)  RADIUS 
B)  Kerberos 
C)  NAT 
D)  digital certificates

Question 11

____________________ IP address mappings work best because some TACACS+ systems use the source IP address to create the encryption key.

Accepted Answer

The answer of ____________________ IP address mappings work best because...

Question 12

____ authentication can enable employees who work remotely or who are traveling to access your internal servers.

Accepted Answer

A)  Client 
B)  User 
C)  Session 
D)  Synchronous 
A)  Client 
B)  User 
C)  Session 
D)  Synchronous

Question 13

Match each item with a statement below.
-Principle by which employees are provided access to the minimal amount of information for the least duration of time necessary to perform their duties

Accepted Answer

A) authentication 
B) least privilege 
C) discretionary access controls 
D) authorization 
E) separation of duties
F)identification
G)need to know
H)nondiscretionary access controls
I)accountability 
A) authentication 
B) least privilege 
C) discretionary access controls 
D) authorization 
E) separation of duties
F)identification
G)need to know
H)nondiscretionary access controls
I)accountability

Question 14

The ____ authentication server is also known as a Key Distribution Center (KDC).

Accepted Answer

A)  TACACS+ 
B)  Kerberos 
C)  WEP 
D)  RADIUS 
A)  TACACS+ 
B)  Kerberos 
C)  WEP 
D)  RADIUS

Question 15

____ access controls remedy a circumstance or mitigate the damage caused during an incident.

Accepted Answer

A)  Corrective 
B)  Detective 
C)  Deterrent 
D)  Preventive 
A)  Corrective 
B)  Detective 
C)  Deterrent 
D)  Preventive

Question 16

Client authentication or ____ authentication should be used when only a single user is coming from a single IP address.

Accepted Answer

A)  discretionary 
B)  network 
C)  user 
D)  session 
A)  discretionary 
B)  network 
C)  user 
D)  session

Question 17

____ is most frequently associated with data classification schemes.

Accepted Answer

A)  Need to know 
B)  Least privilege 
C)  Access control 
D)  Separation of duties 
A)  Need to know 
B)  Least privilege 
C)  Access control 
D)  Separation of duties

Question 18

What are discretionary access controls?

Accepted Answer

DACs are implemented at the discretion o

Question 19

In ____________________-based access controls, access is granted based on a set of rules specified by the central authority.

Accepted Answer

The answer of In ____________________-based access controls, access is granted...

Question 20

Match each item with a statement below.
-Documenting the activities of the authorized individual and systems.

Accepted Answer

A) authentication 
B) least privilege 
C) discretionary access controls 
D) authorization 
E) separation of duties
F)identification
G)need to know
H)nondiscretionary access controls
I)accountability 
A) authentication 
B) least privilege 
C) discretionary access controls 
D) authorization 
E) separation of duties
F)identification
G)need to know
H)nondiscretionary access controls
I)accountability

Describe mandatory access control.

RADIUS works with Network Address Translation (NAT).

____ reduces the chance of an individual violating information security by increasing the scrutiny on any one user.

What are the general steps a firewall uses to authenticate users?

What are the functions that can be used to classify access controls?

Match each item with a statement below. -Determined by a central authority in the organization.

Physical attributes are an example of something you ____ that can be used to verify identity.

Match each item with a statement below. -Confirming the identity of the entity seeking access to a logical or physical area

Match each item with a statement below. -Obtaining the identity of the entity requesting access to a logical or physical area.

You might have to use TACACS+ or ____ if your firewall doesn't support authentication.

____________________ IP address mappings work best because some TACACS+ systems use the source IP address to create the encryption key.

____ authentication can enable employees who work remotely or who are traveling to access your internal servers.

Match each item with a statement below. -Principle by which employees are provided access to the minimal amount of information for the least duration of time necessary to perform their duties

The ____ authentication server is also known as a Key Distribution Center (KDC).

____ access controls remedy a circumstance or mitigate the damage caused during an incident.

Client authentication or ____ authentication should be used when only a single user is coming from a single IP address.

____ is most frequently associated with data classification schemes.

What are discretionary access controls?

In ____________________-based access controls, access is granted based on a set of rules specified by the central authority.

Match each item with a statement below. -Documenting the activities of the authorized individual and systems.

Introduction to Information Security

Security Policies and Standards

Introduction to Firewalls

Packet Filtering

Firewall Configuration and Administration

Working With Proxy Servers and Application-Level Firewalls

Implementing the Bastion Host

Encryption - The Foundation for the Virtual Private Network

Setting up a Virtual Private Network

Filters

Exam 3: Authenticating Users

Describe mandatory access control.

RADIUS works with Network Address Translation (NAT).

____ reduces the chance of an individual violating information security by increasing the scrutiny on any one user.

What are the general steps a firewall uses to authenticate users?

What are the functions that can be used to classify access controls?

Match each item with a statement below. -Determined by a central authority in the organization.

Physical attributes are an example of something you ____ that can be used to verify identity.

Match each item with a statement below. -Confirming the identity of the entity seeking access to a logical or physical area

Match each item with a statement below. -Obtaining the identity of the entity requesting access to a logical or physical area.

You might have to use TACACS+ or ____ if your firewall doesn't support authentication.

____________________ IP address mappings work best because some TACACS+ systems use the source IP address to create the encryption key.

____ authentication can enable employees who work remotely or who are traveling to access your internal servers.

Match each item with a statement below. -Principle by which employees are provided access to the minimal amount of information for the least duration of time necessary to perform their duties

The ____ authentication server is also known as a Key Distribution Center (KDC).

____ access controls remedy a circumstance or mitigate the damage caused during an incident.

Client authentication or ____ authentication should be used when only a single user is coming from a single IP address.

____ is most frequently associated with data classification schemes.

What are discretionary access controls?

In ____________________-based access controls, access is granted based on a set of rules specified by the central authority.

Match each item with a statement below. -Documenting the activities of the authorized individual and systems.

Introduction to Information Security

Security Policies and Standards

Introduction to Firewalls

Packet Filtering

Firewall Configuration and Administration

Working With Proxy Servers and Application-Level Firewalls

Implementing the Bastion Host

Encryption - The Foundation for the Virtual Private Network

Setting up a Virtual Private Network

Filters