Question 1

What is made up of hardware, software, and firmware components that fall within the TCB and enforces the reference monitor concept?

Accepted Answer

A)  Access Monitor
B)  Security Kernel
C)  Reference Monitor
D)  Access Kernel B

Question 2

What could a company do to prevent an employee from accessing a higher level of access by preventing them from even knowing it exists?

Accepted Answer

A)  Database reviews
B)  Cell Suppression
C)  Content-Dependent Access Control
D)  Polyinstantiation D

Question 3

What protocol combines the authentication and authorization functionality?

Accepted Answer

A)  Roaming Operations
B)  RADIUS
C)  TACACS
D)  Diameter B

Question 4

What is based on the sensitivity of data and knows what actions should be allowed?

Accepted Answer

A)  Database reviews
B)  Cell Suppression
C)  Content-dependent access control
D)  Polyinstantiation

Question 5

Biometrics measures unique personal attributes or behaviors. What type of biometric analysis is the most accurate?

Accepted Answer

A)  Fingerprints
B)  Signature Dynamics
C)  Iris Scan
D)  Hand Geometry

Question 6

Olivia provided security features that control how users and systems communicate and interact with other systems and resources. What did Olivia create?

Accepted Answer

A)  Access Controls
B)  Access Limitations
C)  Control Accesses
D)  Limited Access

Question 7

What category is involved with access control layers?

Accepted Answer

A)  Administrative Controls
B)  Physical Controls
C)  Technical Controls
D)  All of the above

Question 8

What type of access control synchronizes with the authentication service by using time or a count as the core piece of the authentication process?

Accepted Answer

A)  Traffic Anomaly-based IDS
B)  Asynchronous Token
C)  Synchronous Token Device
D)  Cryptographic Keys

Question 9

What broad term encompasses the use of different products to identify, authenticate, and authorize users through automated means?

Accepted Answer

A)  Identity Data
B)  Identity Security
C)  Identity Management
D)  All of the above

Question 10

Once an organization determines it needs to have access control techniques and technologies in place, it must choose which kind. What kind uses specific rules that indicative what can and cannot happen between a subject and an object?

Accepted Answer

A)  Capability Table
B)  Context-based Access
C)  Rule-based Access
D)  Access Control List

Question 11

Jeffery is signing in to his network station and is being challenged by a random value called a nonce. Why type of device is this?

Accepted Answer

A)  Traffic Anomaly-based IDS
B)  Asynchronous Token
C)  Network-based Detection
D)  Host-based Detection

Question 12

What is defined as a set of objects that a subject is able to access?

Accepted Answer

A)  Combined Mode
B)  Virtual Memory
C)  Salvaged Memory
D)  Domain

Question 13

There are two processes taking place at the same time, as in data within a variable, through a shared resource, in an incorrect order. What term is being applied?

Accepted Answer

A)  Track Condition
B)  Race condition
C)  Accountability Race
D)  Track Race

Question 14

What security measure analysis is a unique personal attribute or behavior?

Accepted Answer

A)  Fingerprints
B)  Biometrics
C)  Iris Scan
D)  All of the above

Question 15

Access control layers consist of administrative controls, physical controls, and technical controls that work at different levels of what?

Accepted Answer

A)  Within their own categories
B)  Within each control group
C)  Both A and B
D)  Neither A nor B

Question 16

Biometrics measures unique personal attributes or behaviors. What type of biometric analysis looks at different peaks and valleys of the hand?

Accepted Answer

A)  Fingerprints
B)  Signature Dynamics
C)  Hand Topography
D)  Hand Geometry

Question 17

What method gives control of access to the people that are closer to the resources that may better understand who should and should not have access to certain files, data, and resources?

Accepted Answer

A)  Authentication Processes
B)  Access Control Authentication
C)  Decentralized Access Control Administration
D)  Access Implementation Methods

Exam 5: ID and Access