Question 1

Select below the authentication system developed by the Massachusetts Institute of Technology (MIT) to verify the identity of network users:

Accepted Answer

A)  Aurora
B)  Kerberos
C)  CHAP
D)  TACACS B

Question 2

Matching
-The current version of the Terminal Access Control Access Control System (TACACS) authentication service.​

Accepted Answer

A)  Account expiration
B)  Discretionary access control (DA
C)  
C)  Extended TACACS (XTACACS) 
D)  Job rotation
E)  LDAP injection attackF) Least privilegeG) Mandatory access control (MA
C)  H) Separation of dutiesI) TACACS+J) Time-of-day restriction I

Question 3

Matching
-​Limitation imposed as to when a user can log in to a system or access resources.

Accepted Answer

A)  Account expiration
B)  Discretionary access control (DA
C)  
C)  Extended TACACS (XTACACS) 
D)  Job rotation
E)  LDAP injection attackF) Least privilegeG) Mandatory access control (MA
C)  H) Separation of dutiesI) TACACS+J) Time-of-day restriction J

Question 4

Group policy is a Unix feature that allows for the centralized management and configuration of computers and remote users using Unix Active Directory.

Accepted Answer

A) True 
 B)False

Question 5

In the DAC model, ____________________ can create and access their objects freely.

Accepted Answer

The answer of In the DAC model, ____________________ can create...

Question 6

Entries within a Directory Information Base are arranged in a tree structure called the:

Accepted Answer

A)  DAP
B)  PEAP
C)  EAP
D)  DIT

Question 7

____________________ is granting or denying approval to use specific resources.
​
a.​Account expiration
b.Discretionary access control (DAC)​
c.​Extended TACACS (XTACACS)
d.Job rotation​
e.​LDAP injection attack

Accepted Answer

The answer of ____________________ is granting or denying approval to...

Question 8

Describe the two key elements of the MAC model.

Accepted Answer

The answer of Describe the two key elements of the...

Question 9

The Bell-LaPadula (BLP) model of MAC can be used to prevent subjects from creating a new object or performing specific functions on objects that are at a lower level than their own.​

Accepted Answer

A) True 
 B)False

Question 10

Which access control model can dynamically assign roles to subjects based on a set of defined rules?

Accepted Answer

A)  Role Based Access Control
B)  Mandatory Access Control
C)  Rule Based Access Control
D)  Discretionary Access Control

Question 11

When using Role Based Access Control (RBAC), permissions are assigned to:

Accepted Answer

A)  Roles
B)  Groups
C)  Labels
D)  Users

Question 12

Select below the access control model that uses access based on a user's job function within an organization:

Accepted Answer

A)  Role Based Access Control
B)  Rule Based Access Control
C)  Discretionary Access Control
D)  Mandatory Access Control

Question 13

User accounts that remain active after an employee has left an organization are referred to as being what type of accounts?

Accepted Answer

A)  Active
B)  Stale
C)  Orphaned
D)  Fragmented

Question 14

What is the name for a predefined framework that can be used for controlling access, and is embedded into software and hardware?

Accepted Answer

A)  accounting and access model
B)  user control model
C)  access control model
D)  authorization control model

Question 15

Although designed to support remote dial-in access to a corporate network, what service below is commonly used with 802.1x port security for both wired and wireless LANs?

Accepted Answer

A)  RADIUS
B)  ICMP
C)  FTP
D)  Telnet

Question 16

A user or a process functioning on behalf of the user that attempts to access an object is known as the:

Accepted Answer

A)  subject
B)  reference monitor
C)  entity
D)  label

Question 17

Matching
-An attack that constructs LDAP statements based on user input statements, allowing the attacker to retrieve information from the LDAP database or modify its content.​

Accepted Answer

A)  Account expiration
B)  Discretionary access control (DA
C)  
C)  Extended TACACS (XTACACS) 
D)  Job rotation
E)  LDAP injection attackF) Least privilegeG) Mandatory access control (MA
C)  H) Separation of dutiesI) TACACS+J) Time-of-day restriction

Question 18

List the steps for RADIUS authentication with a wireless device in an IEEE 802.1x network.

Accepted Answer

The answer of List the steps for RADIUS authentication with...

Question 19

Describe how Kerberos works.

Accepted Answer

The answer of Describe how Kerberos works....

Question 20

Matching
-Providing only the minimum amount of privileges necessary to perform a job or function.​

Accepted Answer

A)  Account expiration
B)  Discretionary access control (DA
C)  
C)  Extended TACACS (XTACACS) 
D)  Job rotation
E)  LDAP injection attackF) Least privilegeG) Mandatory access control (MA
C)  H) Separation of dutiesI) TACACS+J) Time-of-day restriction

Exam 11: Access Control Fundamentals

Select below the authentication system developed by the Massachusetts Institute of Technology (MIT) to verify the identity of network users:

Matching -The current version of the Terminal Access Control Access Control System (TACACS) authentication service.

Matching -Limitation imposed as to when a user can log in to a system or access resources.

Group policy is a Unix feature that allows for the centralized management and configuration of computers and remote users using Unix Active Directory.

In the DAC model, ____________________ can create and access their objects freely.

Entries within a Directory Information Base are arranged in a tree structure called the:

____________________ is granting or denying approval to use specific resources. a.Account expiration b.Discretionary access control (DAC) c.Extended TACACS (XTACACS) d.Job rotation e.LDAP injection attack

Describe the two key elements of the MAC model.

The Bell-LaPadula (BLP) model of MAC can be used to prevent subjects from creating a new object or performing specific functions on objects that are at a lower level than their own.

Which access control model can dynamically assign roles to subjects based on a set of defined rules?

When using Role Based Access Control (RBAC) , permissions are assigned to:

Select below the access control model that uses access based on a user's job function within an organization:

User accounts that remain active after an employee has left an organization are referred to as being what type of accounts?

What is the name for a predefined framework that can be used for controlling access, and is embedded into software and hardware?

Although designed to support remote dial-in access to a corporate network, what service below is commonly used with 802.1x port security for both wired and wireless LANs?

A user or a process functioning on behalf of the user that attempts to access an object is known as the:

Matching -An attack that constructs LDAP statements based on user input statements, allowing the attacker to retrieve information from the LDAP database or modify its content.

List the steps for RADIUS authentication with a wireless device in an IEEE 802.1x network.

Describe how Kerberos works.

Matching -Providing only the minimum amount of privileges necessary to perform a job or function.

Exam 11: Access Control Fundamentals

Select below the authentication system developed by the Massachusetts Institute of Technology (MIT) to verify the identity of network users:

Matching -The current version of the Terminal Access Control Access Control System (TACACS) authentication service.​

Matching -​Limitation imposed as to when a user can log in to a system or access resources.

Group policy is a Unix feature that allows for the centralized management and configuration of computers and remote users using Unix Active Directory.

In the DAC model, ____________________ can create and access their objects freely.

Entries within a Directory Information Base are arranged in a tree structure called the:

____________________ is granting or denying approval to use specific resources. ​ a.​Account expiration b.Discretionary access control (DAC)​ c.​Extended TACACS (XTACACS) d.Job rotation​ e.​LDAP injection attack

Describe the two key elements of the MAC model.

The Bell-LaPadula (BLP) model of MAC can be used to prevent subjects from creating a new object or performing specific functions on objects that are at a lower level than their own.​

Which access control model can dynamically assign roles to subjects based on a set of defined rules?

When using Role Based Access Control (RBAC) , permissions are assigned to:

Select below the access control model that uses access based on a user's job function within an organization:

User accounts that remain active after an employee has left an organization are referred to as being what type of accounts?

What is the name for a predefined framework that can be used for controlling access, and is embedded into software and hardware?

Although designed to support remote dial-in access to a corporate network, what service below is commonly used with 802.1x port security for both wired and wireless LANs?

A user or a process functioning on behalf of the user that attempts to access an object is known as the:

Matching -An attack that constructs LDAP statements based on user input statements, allowing the attacker to retrieve information from the LDAP database or modify its content.​

List the steps for RADIUS authentication with a wireless device in an IEEE 802.1x network.

Describe how Kerberos works.

Matching -Providing only the minimum amount of privileges necessary to perform a job or function.​

Matching -The current version of the Terminal Access Control Access Control System (TACACS) authentication service.

Matching -Limitation imposed as to when a user can log in to a system or access resources.

____________________ is granting or denying approval to use specific resources. a.Account expiration b.Discretionary access control (DAC) c.Extended TACACS (XTACACS) d.Job rotation e.LDAP injection attack

The Bell-LaPadula (BLP) model of MAC can be used to prevent subjects from creating a new object or performing specific functions on objects that are at a lower level than their own.

Matching -An attack that constructs LDAP statements based on user input statements, allowing the attacker to retrieve information from the LDAP database or modify its content.

Matching -Providing only the minimum amount of privileges necessary to perform a job or function.