Deck 11: Authentication and Account Management

Question 1

The use of one authentication credential to access multiple accounts or applications is referred to as which of the following?

A)individual Sign On
B)single Sign On
C)unilateral Sign On
D)federated Sign On

Answer 1

B

Question 2

Which term below describes the time it takes for a key to be pressed and then released?

A)dwell time
B)lead time
C)sync time
D)react time

Answer 2

A

Question 3

A retina scanner has become the most common type of standard biometrics.

Answer 3

False

Question 4

Passwords provide strong protection.

Question 5

What variation of a dictionary attack involves a dictionary attack combined with a brute force attack,and will slightly alter dictionary words by adding numbers to the end of the password,spelling words backward,slightly misspelling words,or including special characters?

A)brute force
B)hash replay
C)network replay
D)hybrid

Question 6

A hardware security token is typically a small device with a window display.

Question 7

Brute force attacks can be very slow because every character combination must be generated.

Question 8

Voice recognition is identical to speech recognition.

Question 9

What kind of biometrics utilizes a person's unique physical characteristics for authentication,such as fingerprints or unique characteristics of a person's face?

A)cognitive biometrics
B)reactive biometrics
C)standard biometrics
D)physical biometrics

Question 10

Most password attacks today are an offline attack.

Question 11

A TOTP changes after a set period.

Question 12

What type of attack involves using every possible combination of letters,numbers,and characters to create candidate digests that are then matched against those in a stolen digest file?

A)Space division
B)Brute force
C)Known ciphertext
D)Known plaintext

Question 13

What is the main weakness associated with the use of passwords?

A)human memory
B)encryption technology
C)handshake technology
D)human reliability

Question 14

Keystroke dynamics uses two unique typing variables.

Question 15

Which type of biometrics is based on the perception,thought process,and understanding of the user?

A)cognitive biometrics
B)reactive biometrics
C)standard biometrics
D)physical biometrics

Question 16

A secret combination of letters,numbers,and/or characters that only the user should have knowledge of,is known as a:

A)token
B)password
C)biometric detail
D)challenge

Question 17

The use of a single authentication credential that is shared across multiple networks is called:

A)access management
B)authorization management
C)identity management
D)risk management

Question 18

Hash algorithms like MD5 and SHA are considered secure for creating digests because these hashing algorithms are designed to create a digest as strong as possible.

Question 19

The use of what item below involves the creation of a large pre-generated data set of candidate digests?

A)rainbow tables
B)randomized character list
C)word list
D)cascade tables

Question 20

Open ID Connect is an Authentication protocol that can be used in OAuth 2.0 as a standard means to obtain user identity.

Question 21

Which of the following accounts is a user account that is created explicitly to provide a security context for services running on a server?

A)service account
B)shared account
C)system account
D)privileged account

Question 22

Which of the following is a category of group password settings in Microsoft Windows? (Choose all that apply. )

A)Password Policy Settings
B)Account Policy Settings
C)Password Lockout Policy
D)Account Lockout Policy

Question 23

If a user has more than one type of authentication credential,what type of authentication is being used?

A)pattern authentication
B)verified authentication
C)multifactor authentication
D)token authentication

Question 24

What federation system technology uses federation standards to provide SSO and exchanging attributes?

A)OAuth
B)Open ID Connect
C)Windows Live ID
D)Shibboleth

Question 25

Which of the following is a is a two-way relationship that is automatically created between parent and child domains in a Microsoft Active Directory forest?

A)double trust
B)federated trust
C)transitive trust
D)domain trust

Question 26

What type of authentication is based on what the user has?

A)software token
B)hardware token
C)security token
D)identity token

Question 27

What specific type of authentication can be based on where the user is located?

A)GPS
B)somewhere locating
C)geocache
D)geolocation

Question 28

What term best describes managing the login credentials such as passwords in user accounts?

A)account management
B)user management
C)credential management
D)password management

Question 29

Which of the following are key stretching password hash algorithms? (Choose all that apply. )

A)bcrypt
B)PBKDF2
C)seq02
D)SHA-256

Question 30

What type of card contains an integrated circuit chip that can hold information,which then can be used as part of the authentication process?

A)smart card
B)SIM card
C)E-card
D)BioCard

Question 31

A list of the available nonkeyboard characters can be seen in Windows by opening what utility?

A)charmap.exe
B)charlist.exe
C)chardump.exe
D)listchar.exe

Question 32

What technology is an open source federation framework and supports the development of authorization protocols?

A)Shibboleth
B)OAuth
C)SAML
D)Kerberos

Question 33

What type of attack conducts a statistical analysis of the stolen passwords that is then used to create a mask to break the largest number of passwords?

A)character set attack
B)binary attack
C)mask attack
D)rule attack

Question 34

What federated identity management (FIM)relies on token credentials?

A)OAuth
B)OpenID
C)Shibboleth
D)OpenPass

Question 35

What option below represents an example of behavioral biometrics?

A)user dynamics
B)keystroke dynamics
C)facial recognition
D)fingerprint recognition

Question 36

Which of the following options prevents a logon after a set number of failed logon attempts within a specified period and can also specify the length of time that the lockout is in force?

A)password lock
B)logon lock
C)password lockout
D)logon lockout

Question 37

A U.S.Department of Defense (DoD)smart card that is used for identification of active-duty and reserve military personnel along with civilian employees and special contractors is called:

A)Common Access Card (CAC)
B)Identity Validation Card (IVC)
C)Credential Validation Card (CVC)
D)Personal Credential Card (PCC)

Question 38

Which of the following is NOT a valid biometric disadvantage?

A)crossover error rate
B)false acceptance rate
C)false error rate
D)false rejection rate

Question 39

What can be used to increase the strength of hashed passwords?

A)salt
B)key stretching
C)double hashing
D)single crypting

Question 40

Which of the following account lockout policy settings determines the number of failed login attempts before a lockout occurs?

A)system lockout threshold
B)account lockout threshold
C)administrator lockout threshold
D)user lockout threshold

Question 41

Why do passwords place a heavy load on human memory?

Question 42

Describe how rainbow tables work.

Question 43

What smartcard standard is used to cover all U.S.government employees?

Question 44

Discuss the types of shortcuts that users take to help them recall their passwords.

Question 45

What are the three advantages of a rainbow table over other password attacks?

Question 46

How does a retina scanner work?

Question 47

What is the difference between multifactor authentication and single-factor authentication?

Question 48

Why should account passwords be disabled instead of the account being immediately deleted?

Question 49

How does an iris scanner work?

Question 50

What is a dictionary attack?