Deck 23: Internet Authentication Applications

Question 1

The approach taken by Kerberos is using authentication software tied
to a secure authentication server.

Answer 1

True

Question 2

X.509 provides a format for use in revoking a key before it expires.

Answer 2

True

Question 3

The authentication server shares a unique secret key with each server.

Answer 3

True

Question 4

_______ is important as part of the directory service that it supports and is also a basic building block used in other standards.

A)PKI
B)X.509
C)Kerberos
D)FIM

Question 5

Kerberos is designed to counter only one specific threat to the security
of a client/server dialogue.

Question 6

________ requires that a user prove his or her identity for each service invoked and,optionally,requires servers to prove their identity to clients.

A)FIM
B)Kerberos
C)X.509
D)PKI

Question 7

The principal objective for developing a PKI is to enable secure,
convenient,and efficient acquisition of private keys.

Question 8

An obvious security risk is that of impersonation.

Question 9

The ticket-granting ticket is encrypted with a secret key known only to
the AS and the TGS.

Question 10

Kerberos uses the _______ encryption algorithm.

A)AES
B)PKI
C)DES
D)TGS

Question 11

Update is not required when the certificate lifetime expires or as a
result of certificate revocation.

Question 12

Federated identity management makes use of a number of standards
that provide the building blocks for secure identity information exchange across different domains or heterogeneous systems.

Question 13

The ticket-granting ticket is not reusable.

Question 14

Because serial numbers are unique within a CA,the serial number is
sufficient to identify the certificate.

Question 15

CMP,defined in RFC 2510,is designed to be a flexible protocol able
to accommodate a variety of technical,operational,and business models.

Question 16

Kerberos does not support interrealm authentication.

Question 17

One of the earliest and most widely used services is _________.

A)Kerberos
B)FIM
C)PKI
D)X.509

Question 18

Initialization begins the process of enrolling in a PKI.

Question 19

The overall scheme of Kerberos is that of a trusted third-party
authentication service.

Question 20

_______ certificates are used in most network security applications,including IP security,secure sockets layer,secure electronic transactions,and S/MIME.

A)X.509
B)PKI
C)FIM
D)SCA

Question 21

_______ is the process in which a CA issues a certificate for a user's public key and returns that certificate to the user's client system and/or posts that certificate in a repository.

A)Certification
B)Registration
C)Initialization
D)Authorization

Question 22

An alternative to each server being required to confirm identities of clients who request service is to use an _______ that knows the passwords of all users and stores them in a centralized database.

Question 23

A software utility initially developed at MIT and available both in the public domain and in commercially supported versions,________ is the defacto standard for remote authentication.

Question 24

A full-service Kerberos environment consisting of a Kerberos server that has the user ID and password of all participating users in its database and shares a secret key with each server,all users and servers being registered with the Kerberos server,is referred to as a Kerberos ______.

Question 25

______ is the set of hardware,software,people,policies,and procedures needed to create,manage,store,distribute,and revoke digital certificates based on asymmetric cryptography.

Question 26

_______ systems are automated methods of verifying or recognizing identity on the basis of some physiological or behavioral characteristic.

Question 27

_______ is movement of data in a business process.

A)Provisioning
B)Workflow automation
C)Revocation
D)Initialization

Question 28

________ allows end entities to restore their encryption/decryption key pair from an authorized key backup facility.

Question 29

The focus of _________ is defining an identity for each user,associating attributes with the identity,and enforcing a means by which a user can verify identity.

Question 30

The certification _________ is the issuer of certificates and certificate revocation lists.

Question 31

The _________ is an optional bit string field used to identify uniquely the issuing CA in the event the X.500 name has been reused for different entities.

Question 32

_____ is a markup language that uses sets of embedded tags or labels to characterize text elements within a document so as to indicate their appearance,function,meaning,or context.

A)HML
B)HTTP
C)XML
D)SOAP

Question 33

The _______ consists of two dates: the first and last on which the certificate is valid.

A)version
B)period of validity
C)extension
D)unique identifier

Question 34

A principal element of an identity management system is _______.

A)workflow automation
B)delegated administration
C)authentication
D)all of the above

Question 35

In a generic identity management architecture a ________ is an identity holder.

Question 36

_______ is the process whereby a user first makes itself known to a CA prior to that CA issuing a certificate or certificates for that user.

A)Authorization
B)Registration
C)Certification
D)Initialization

Question 37

A _______ is a generic term used to denote any method for storing certificates and CRLs so that they can be retrieved by end entities.

A)RA
B)registration
C)repository
D)CA

Question 38

An integer value unique within the issuing CA that is unambiguously associated with the certificate is the ________.

A)issuer name
B)subject's public-key information
C)issuer unique identifier
D)serial number

Question 39

_______ is a minimal set of conventions for invoking code using XML over HTTP that enables applications to request services from one another with XML-based requests and receive responses as data formatted with XML.

A)SOAP
B)SAML
C)HTML
D)WS-Security

Question 40

________ is a process where authentication and permission will be passed on from one system to another,usually across multiple enterprises,reducing the number of authentications needed by the user.

A)Integration
B)Registration
C)Synchronization
D)Federation

Question 41

In a generic identity management architecture _______ are entities that obtain and employ data maintained and provided by identity and attribute providers,often to support authorization decisions and to collect audit information.

Question 42

________ is a set of SOAP extensions for implementing message integrity and confidentiality in Web services.

Question 43

In Kerberos,the ___________ decrypts the ticket and authenticator,verifies the request,and creates ticket for requested server.

Question 44

The ticket contains the user's ID,the server's ID,a __________,a lifetime after which the ticket is invalid,and a copy of the same session key sent in the outer message to the client.

Question 45

_______ is an XML-based language for the exchange of security information between online business partners.