Exam 3: User Authentication

A __________ strategy is one in which the system periodically runs its own password cracker to find guessable passwords.

A __________ is when an adversary attempts to achieve user authentication without access to the remote host or to the intervening communications path.

The __________ step is presenting or generating authentication information that corroborates the binding between the entity and the identifier.

__________ defines user authentication as "the process of verifying an identity claimed by or for a system entity".

The __________ is the pattern formed by veins beneath the retinal surface.

A __________ is a password guessing program.

A __________ is directed at the user file at the host where passwords,token passcodes,or biometric templates are stored.

With the __________ policy a user is allowed to select their own password,but the system checks to see if the password is allowable.

Identification is the means of establishing the validity of a claimed identity provided by a user.

Keylogging is a form of host attack.

A __________ attack attempts to disable a user authentication service by flooding the service with numerous authentication attempts.

Enrollment creates an association between a user and the user's biometric characteristics.

Depending on the details of the overall authentication system,the registration authority issues some sort of electronic credential to the subscriber.

User authentication is the fundamental building block and the primary line of defense.

Identifiers should be assigned carefully because authenticated identities are the basis for other security services.

To counter threats to remote user authentication,systems generally rely on some form of ___________ protocol.

In a biometric scheme some physical characteristic of the individual is mapped into a digital representation.

Each individual who is to be included in the database of authorized users must first be __________ in the system.

User authentication is a procedure that allows communicating parties to verify that the contents of a received message have not been altered and that the source is authentic.

The technique for developing an effective and efficient proactive password checker based on rejecting words on a list is based on the use of a __________ filter.