Question 1

Match each item with a statement below.
-This principle limits individuals' information access to what is required to perform their jobs.

Accepted Answer

A) authentication 
B) least privilege 
C) discretionary access controls 
D) authorization 
E) separation of duties
F)identification
G)need to know
H)nondiscretionary access controls
I)accountability 
A) authentication 
B) least privilege 
C) discretionary access controls 
D) authorization 
E) separation of duties
F)identification
G)need to know
H)nondiscretionary access controls
I)accountability

Question 2

Match each item with a statement below.
-This principle increases the security of information and other assets by requiring that more than one individual be responsible for a particular information asset, process, or task.

Accepted Answer

A) authentication 
B) least privilege 
C) discretionary access controls 
D) authorization 
E) separation of duties
F)identification
G)need to know
H)nondiscretionary access controls
I)accountability 
A) authentication 
B) least privilege 
C) discretionary access controls 
D) authorization 
E) separation of duties
F)identification
G)need to know
H)nondiscretionary access controls
I)accountability

Question 3

In ____, access to a specific set of information is dependent on the information's content.

Accepted Answer

A)  content-dependent 
B)  rule-based 
C)  role-based 
D)  task-based 
A)  content-dependent 
B)  rule-based 
C)  role-based 
D)  task-based

Question 4

A PIN is an example of something you ____.

Accepted Answer

A)  know 
B)  have 
C)  are 
D)  do 
A)  know 
B)  have 
C)  are 
D)  do

Question 5

____ authentication is most commonly set up as a form of auditing and occurs when a system records the activities of each user and writes details about each activity to a log file.

Accepted Answer

A)  Local 
B)  Discretionary 
C)  Centralized 
D)  Decentralized 
A)  Local 
B)  Discretionary 
C)  Centralized 
D)  Decentralized

Question 6

Access controls are defined only using technology.

Accepted Answer

A) True 
 B)False

Question 7

____ access controls help the organization avoid an incident.

Accepted Answer

A)  Corrective 
B)  Detective 
C)  Deterrent 
D)  Preventive 
A)  Corrective 
B)  Detective 
C)  Deterrent 
D)  Preventive

Question 8

With ____________________ authentication, the firewall enables the authenticated user to access the desired resources for a specific period of time.

Accepted Answer

The answer of With ____________________ authentication, the firewall enables the...

Question 9

In a lattice-based access control, the column of attributes associated with a particular object is referred to as a(n) ____.

Accepted Answer

A)  need-to-know 
B)  access control list (ACL) 
C)  classification scheme 
D)  rule-based configuration 
A)  need-to-know 
B)  access control list (ACL) 
C)  classification scheme 
D)  rule-based configuration

Question 10

Role-based access controls are a type of ____ access controls.

Accepted Answer

A)  mandatory 
B)  nondiscretionary 
C)  discretionary 
D)  task-based 
A)  mandatory 
B)  nondiscretionary 
C)  discretionary 
D)  task-based

Match each item with a statement below. -This principle limits individuals' information access to what is required to perform their jobs.

Match each item with a statement below. -This principle increases the security of information and other assets by requiring that more than one individual be responsible for a particular information asset, process, or task.

In ____, access to a specific set of information is dependent on the information's content.

A PIN is an example of something you ____.

____ authentication is most commonly set up as a form of auditing and occurs when a system records the activities of each user and writes details about each activity to a log file.

Access controls are defined only using technology.

____ access controls help the organization avoid an incident.

With ____________________ authentication, the firewall enables the authenticated user to access the desired resources for a specific period of time.

In a lattice-based access control, the column of attributes associated with a particular object is referred to as a(n) ____.

Role-based access controls are a type of ____ access controls.

Introduction to Information Security

Security Policies and Standards

Introduction to Firewalls

Packet Filtering

Firewall Configuration and Administration

Working With Proxy Servers and Application-Level Firewalls

Implementing the Bastion Host

Encryption - The Foundation for the Virtual Private Network

Setting up a Virtual Private Network

Filters

Exam 3: Authenticating Users

Match each item with a statement below. -This principle limits individuals' information access to what is required to perform their jobs.

Match each item with a statement below. -This principle increases the security of information and other assets by requiring that more than one individual be responsible for a particular information asset, process, or task.

In ____, access to a specific set of information is dependent on the information's content.

A PIN is an example of something you ____.

____ authentication is most commonly set up as a form of auditing and occurs when a system records the activities of each user and writes details about each activity to a log file.

Access controls are defined only using technology.

____ access controls help the organization avoid an incident.

With ____________________ authentication, the firewall enables the authenticated user to access the desired resources for a specific period of time.

In a lattice-based access control, the column of attributes associated with a particular object is referred to as a(n) ____.

Role-based access controls are a type of ____ access controls.

Introduction to Information Security

Security Policies and Standards

Introduction to Firewalls

Packet Filtering

Firewall Configuration and Administration

Working With Proxy Servers and Application-Level Firewalls

Implementing the Bastion Host

Encryption - The Foundation for the Virtual Private Network

Setting up a Virtual Private Network

Filters