Question 1

Smart cards are less expensive to implement than memory cards.

Accepted Answer

A) True 
 B)False  False

Question 2

What defines the method for identifying and authenticating users and the level of access that is granted to users?

Accepted Answer

A)   Least privilege
B)   Dual controls
C)   Separation of duties
D)   Access control policy D

Question 3

Passwords are considered weaker than passphrases.

Accepted Answer

A) True 
 B)False  True

Question 4

Type I errors are more dangerous than Type II errors.

Accepted Answer

A) True 
 B)False

Question 5

When considering FAR, FRR, and CER, smaller values are better.

Accepted Answer

A) True 
 B)False

Question 6

Pharming and phishing are password attacks.

Accepted Answer

A) True 
 B)False

Question 7

A network-based IDS is the most common IDS and monitors network traffic on a local network segment.

Accepted Answer

A) True 
 B)False

Question 8

Which of the following are physical access controls?

Accepted Answer

A)   Security policies
B)   Baselines
C)   Badges
D)   Audit trails

Question 9

Which of the following is an example of three-factor authentication?

Accepted Answer

A)   Username, password, smart card
B)   Password, smart card, PIN
C)   Password, smart card, iris scan
D)   Smart card, iris scan, keystroke dynamics

Question 10

A deny-by-default stance is less strict than an allow-by-default stance.

Accepted Answer

A) True 
 B)False

Question 11

Knowledge factor authentication is also referred to as Type I authentication factor.

Accepted Answer

A) True 
 B)False

Question 12

Content-dependent access control is based on subject or object attributes or environmental characteristics.

Accepted Answer

A) True 
 B)False

Question 13

Of the options given, which biometric consideration is MOST important?

Accepted Answer

A)   FAR
B)   Enrollment time
C)   Throughput rate
D)   FRR

Question 14

In which access control category do fire extinguishers fall?

Accepted Answer

A)   Detective
B)   Corrective
C)   Preventive
D)   Compensative

Question 15

Which type of IDS analyzes traffic and compares it to normal traffic to determine whether said traffic is a threat?

Accepted Answer

A)   Anomaly-based
B)   Signature-based
C)   Rule-based
D)   Pattern-matching

Question 16

In which access control model is all that is not expressly permitted is forbidden?

Accepted Answer

A)   MAC
B)   RBAC
C)   Rule-based access control
D)   DAC

Question 17

Which malicious software collects private user data?

Accepted Answer

A)   Virus
B)   Spyware
C)   Worm
D)   Trojan horse

Question 18

Which accountability mechanism reviews facility and perimeter protections?

Accepted Answer

A)   Physical vulnerability assessment
B)   Personnel vulnerability assessment
C)   Clipping level
D)   Blind test

Question 19

Retina scans have a higher accuracy than any other biometric scan.

Accepted Answer

A) True 
 B)False

Question 20

Which concept ensures that data is protected from unauthorized modification or data corruption?

Accepted Answer

A)   Confidentiality
B)   Integrity
C)   Availability
D)   Identification

Exam 2: Access Control

Smart cards are less expensive to implement than memory cards.

What defines the method for identifying and authenticating users and the level of access that is granted to users?

Passwords are considered weaker than passphrases.

Type I errors are more dangerous than Type II errors.

When considering FAR, FRR, and CER, smaller values are better.

Pharming and phishing are password attacks.

A network-based IDS is the most common IDS and monitors network traffic on a local network segment.

Which of the following are physical access controls?

Which of the following is an example of three-factor authentication?

A deny-by-default stance is less strict than an allow-by-default stance.

Knowledge factor authentication is also referred to as Type I authentication factor.

Content-dependent access control is based on subject or object attributes or environmental characteristics.

Of the options given, which biometric consideration is MOST important?

In which access control category do fire extinguishers fall?

Which type of IDS analyzes traffic and compares it to normal traffic to determine whether said traffic is a threat?

In which access control model is all that is not expressly permitted is forbidden?

Which malicious software collects private user data?

Which accountability mechanism reviews facility and perimeter protections?

Retina scans have a higher accuracy than any other biometric scan.

Which concept ensures that data is protected from unauthorized modification or data corruption?