Question 1

Select below the authentication system developed by the Massachusetts Institute of Technology (MIT) to verify the identity of network users:

Accepted Answer

A) Aurora 
B) Kerberos 
C) CHAP 
D) TACACS 
A) Aurora 
B) Kerberos 
C) CHAP 
D) TACACS B

Question 2

Matching
-The current version of the Terminal Access Control Access Control System (TACACS) authentication service.​

Accepted Answer

A) Account expiration 
B) Discretionary access control (DA
C)  
C) Extended TACACS (XTACACS) 
D) Job rotation 
E) LDAP injection attack
F)Least privilege
G)Mandatory access control (MA
C) 
H)Separation of duties
I)TACACS+
J)Time-of-day restriction 
A) Account expiration 
B) Discretionary access control (DA
C)  
C) Extended TACACS (XTACACS) 
D) Job rotation 
E) LDAP injection attack
F)Least privilege
G)Mandatory access control (MA
C) 
H)Separation of duties
I)TACACS+
J)Time-of-day restriction I

Question 3

Matching
-​Limitation imposed as to when a user can log in to a system or access resources.

Accepted Answer

A) Account expiration 
B) Discretionary access control (DA
C)  
C) Extended TACACS (XTACACS) 
D) Job rotation 
E) LDAP injection attack
F)Least privilege
G)Mandatory access control (MA
C) 
H)Separation of duties
I)TACACS+
J)Time-of-day restriction 
A) Account expiration 
B) Discretionary access control (DA
C)  
C) Extended TACACS (XTACACS) 
D) Job rotation 
E) LDAP injection attack
F)Least privilege
G)Mandatory access control (MA
C) 
H)Separation of duties
I)TACACS+
J)Time-of-day restriction J

Question 4

Group policy is a Unix feature that allows for the centralized management and configuration of computers and remote users using Unix Active Directory.

Accepted Answer

A) True 
 B)False

Question 5

In the DAC model, ____________________ can create and access their objects freely.

Accepted Answer

The answer of In the DAC model, ____________________ can create...

Question 6

Entries within a Directory Information Base are arranged in a tree structure called the:

Accepted Answer

A) DAP 
B) PEAP 
C) EAP 
D) DIT 
A) DAP 
B) PEAP 
C) EAP 
D) DIT

Question 7

____________________ is granting or denying approval to use specific resources.
​
a.​Account expiration
b.Discretionary access control (DAC)​
c.​Extended TACACS (XTACACS)
d.Job rotation​
e.​LDAP injection attack

Accepted Answer

The answer of ____________________ is granting or denying approval to...

Question 8

Describe the two key elements of the MAC model.

Accepted Answer

Labels. In a system using MAC, every ent

Question 9

The Bell-LaPadula (BLP) model of MAC can be used to prevent subjects from creating a new object or performing specific functions on objects that are at a lower level than their own.​

Accepted Answer

A) True 
 B)False

Question 10

Which access control model can dynamically assign roles to subjects based on a set of defined rules?

Accepted Answer

A) Role Based Access Control 
B) Mandatory Access Control 
C) Rule Based Access Control 
D) Discretionary Access Control 
A) Role Based Access Control 
B) Mandatory Access Control 
C) Rule Based Access Control 
D) Discretionary Access Control

Question 11

When using Role Based Access Control (RBAC), permissions are assigned to:

Accepted Answer

A) Roles 
B) Groups 
C) Labels 
D) Users 
A) Roles 
B) Groups 
C) Labels 
D) Users

Question 12

Select below the access control model that uses access based on a user's job function within an organization:

Accepted Answer

A) Role Based Access Control 
B) Rule Based Access Control 
C) Discretionary Access Control 
D) Mandatory Access Control 
A) Role Based Access Control 
B) Rule Based Access Control 
C) Discretionary Access Control 
D) Mandatory Access Control

Question 13

User accounts that remain active after an employee has left an organization are referred to as being what type of accounts?

Accepted Answer

A) Active 
B) Stale 
C) Orphaned 
D) Fragmented 
A) Active 
B) Stale 
C) Orphaned 
D) Fragmented

Question 14

What is the name for a predefined framework that can be used for controlling access, and is embedded into software and hardware?

Accepted Answer

A) accounting and access model 
B) user control model 
C) access control model 
D) authorization control model 
A) accounting and access model 
B) user control model 
C) access control model 
D) authorization control model

Question 15

Although designed to support remote dial-in access to a corporate network, what service below is commonly used with 802.1x port security for both wired and wireless LANs?

Accepted Answer

A) RADIUS 
B) ICMP 
C) FTP 
D) Telnet 
A) RADIUS 
B) ICMP 
C) FTP 
D) Telnet

Question 16

A user or a process functioning on behalf of the user that attempts to access an object is known as the:

Accepted Answer

A) subject 
B) reference monitor 
C) entity 
D) label 
A) subject 
B) reference monitor 
C) entity 
D) label

Question 17

Matching
-An attack that constructs LDAP statements based on user input statements, allowing the attacker to retrieve information from the LDAP database or modify its content.​

Accepted Answer

A) Account expiration 
B) Discretionary access control (DA
C)  
C) Extended TACACS (XTACACS) 
D) Job rotation 
E) LDAP injection attack
F)Least privilege
G)Mandatory access control (MA
C) 
H)Separation of duties
I)TACACS+
J)Time-of-day restriction 
A) Account expiration 
B) Discretionary access control (DA
C)  
C) Extended TACACS (XTACACS) 
D) Job rotation 
E) LDAP injection attack
F)Least privilege
G)Mandatory access control (MA
C) 
H)Separation of duties
I)TACACS+
J)Time-of-day restriction

Question 18

List the steps for RADIUS authentication with a wireless device in an IEEE 802.1x network.

Accepted Answer

Once the server information is

Question 19

Describe how Kerberos works.

Accepted Answer

Kerberos is typically used when a user a

Question 20

Matching
-Providing only the minimum amount of privileges necessary to perform a job or function.​

Accepted Answer

A) Account expiration 
B) Discretionary access control (DA
C)  
C) Extended TACACS (XTACACS) 
D) Job rotation 
E) LDAP injection attack
F)Least privilege
G)Mandatory access control (MA
C) 
H)Separation of duties
I)TACACS+
J)Time-of-day restriction 
A) Account expiration 
B) Discretionary access control (DA
C)  
C) Extended TACACS (XTACACS) 
D) Job rotation 
E) LDAP injection attack
F)Least privilege
G)Mandatory access control (MA
C) 
H)Separation of duties
I)TACACS+
J)Time-of-day restriction

Select below the authentication system developed by the Massachusetts Institute of Technology (MIT) to verify the identity of network users:

Matching -The current version of the Terminal Access Control Access Control System (TACACS) authentication service.

Matching -Limitation imposed as to when a user can log in to a system or access resources.

Group policy is a Unix feature that allows for the centralized management and configuration of computers and remote users using Unix Active Directory.

In the DAC model, ____________________ can create and access their objects freely.

Entries within a Directory Information Base are arranged in a tree structure called the:

____________________ is granting or denying approval to use specific resources. a.Account expiration b.Discretionary access control (DAC) c.Extended TACACS (XTACACS) d.Job rotation e.LDAP injection attack

Describe the two key elements of the MAC model.

The Bell-LaPadula (BLP) model of MAC can be used to prevent subjects from creating a new object or performing specific functions on objects that are at a lower level than their own.

Which access control model can dynamically assign roles to subjects based on a set of defined rules?

When using Role Based Access Control (RBAC), permissions are assigned to:

Select below the access control model that uses access based on a user's job function within an organization:

User accounts that remain active after an employee has left an organization are referred to as being what type of accounts?

What is the name for a predefined framework that can be used for controlling access, and is embedded into software and hardware?

Although designed to support remote dial-in access to a corporate network, what service below is commonly used with 802.1x port security for both wired and wireless LANs?

A user or a process functioning on behalf of the user that attempts to access an object is known as the:

Matching -An attack that constructs LDAP statements based on user input statements, allowing the attacker to retrieve information from the LDAP database or modify its content.

List the steps for RADIUS authentication with a wireless device in an IEEE 802.1x network.

Describe how Kerberos works.

Matching -Providing only the minimum amount of privileges necessary to perform a job or function.

Introduction to Security

Malware and Social Engineering Attacks

Application and Networking-Based Attacks

Host, Application, and Data Security

Basic Cryptography

Advanced Cryptography

Network Security

Administering a Secure Network

Wireless Network Security

Mobile Device Security

Authentication and Account Management

Business Continuity

Risk Mitigation

Vulnerability Assessment and Third Party Integration

Filters

Exam 11: Access Control Fundamentals

Select below the authentication system developed by the Massachusetts Institute of Technology (MIT) to verify the identity of network users:

Matching -The current version of the Terminal Access Control Access Control System (TACACS) authentication service.​

Matching -​Limitation imposed as to when a user can log in to a system or access resources.

Group policy is a Unix feature that allows for the centralized management and configuration of computers and remote users using Unix Active Directory.

In the DAC model, ____________________ can create and access their objects freely.

Entries within a Directory Information Base are arranged in a tree structure called the:

____________________ is granting or denying approval to use specific resources. ​ a.​Account expiration b.Discretionary access control (DAC)​ c.​Extended TACACS (XTACACS) d.Job rotation​ e.​LDAP injection attack

Describe the two key elements of the MAC model.

The Bell-LaPadula (BLP) model of MAC can be used to prevent subjects from creating a new object or performing specific functions on objects that are at a lower level than their own.​

Which access control model can dynamically assign roles to subjects based on a set of defined rules?

When using Role Based Access Control (RBAC), permissions are assigned to:

Select below the access control model that uses access based on a user's job function within an organization:

User accounts that remain active after an employee has left an organization are referred to as being what type of accounts?

What is the name for a predefined framework that can be used for controlling access, and is embedded into software and hardware?

Although designed to support remote dial-in access to a corporate network, what service below is commonly used with 802.1x port security for both wired and wireless LANs?

A user or a process functioning on behalf of the user that attempts to access an object is known as the:

Matching -An attack that constructs LDAP statements based on user input statements, allowing the attacker to retrieve information from the LDAP database or modify its content.​

List the steps for RADIUS authentication with a wireless device in an IEEE 802.1x network.

Describe how Kerberos works.

Matching -Providing only the minimum amount of privileges necessary to perform a job or function.​

Introduction to Security

Malware and Social Engineering Attacks

Application and Networking-Based Attacks

Host, Application, and Data Security

Basic Cryptography

Advanced Cryptography

Network Security

Administering a Secure Network

Wireless Network Security

Mobile Device Security

Authentication and Account Management

Business Continuity

Risk Mitigation

Vulnerability Assessment and Third Party Integration

Filters

Matching -The current version of the Terminal Access Control Access Control System (TACACS) authentication service.

Matching -Limitation imposed as to when a user can log in to a system or access resources.

____________________ is granting or denying approval to use specific resources. a.Account expiration b.Discretionary access control (DAC) c.Extended TACACS (XTACACS) d.Job rotation e.LDAP injection attack

The Bell-LaPadula (BLP) model of MAC can be used to prevent subjects from creating a new object or performing specific functions on objects that are at a lower level than their own.

Matching -An attack that constructs LDAP statements based on user input statements, allowing the attacker to retrieve information from the LDAP database or modify its content.

Matching -Providing only the minimum amount of privileges necessary to perform a job or function.