2602 Module 6 review lis

What is a hybrid attack?

And attack that slightly alters dictionary words

Keystroke dynamics is an example of which type of biometrics?

Behavioral

A TOTP token code is valid

For as long as it appears on the device

Creating a pattern of where user access is a remote web account is an example of

Geolocation

What type of one time password (OTP) changes after a set time period?

HMAC-Based one-time password (HOTP)

Which one time password is event driven?

HOTP

What technology allows users to share resources stored on one site with a second site without forwarding their authentication credentials to the other site?

OAuth

Which single sign on (SSO) technology depends on tokens?

OAuth

Select below the decentralized open source FIM that does not require specific software to be installed on the desktop:

OpenID

Which of these is a decentralized open source FIM that does not require specific software to be installed on the desktop?

OpenID

User accounts that remain active after an employee has left an organization are referred to as being what type of accounts?

Orphaned

Which attack is an attempt to compare known digest to an unknown digest?

Pre-image attack

Although designed to support remote dial in access to a corporate network, what service below is commonly used with 802.1x port security for both wired and wireless LANs?

RADIUS

Although designed to support remote dial-in access to a corporate network, what service below is commonly used with 802.1x port security for both wired and wireless LANs?

RADIUS

The use of what item below involves the creation of a large pregenerated data set of candidate digests?

Rainbow tables

Select below the access control model that uses access based on a user's job function within an organization:

Role Based Access Control

When using Role Based Access Control (RBAC), permissions are assigned to:

Roles

Which access control model can dynamically assign roles to subjects based on a set of defined rules?

Rule Based Access Control

What can be used to increase the strength of hashed passwords?

Salt

To assist with controlling orphaned and dormant accounts, what can be used to indicate when an account is no longer active?

Account expiration

Which of these is not a characteristic of a week password?

A long password

A list that specifies which subjects are allowed to access an object and what operations they can perform on it is referred to as a(n):

ACL

What type of attack involves using every possible combination of letters, numbers, and characters to create candidate digests that are then matched against those in a stolen digest file?

Brute force

____ biometrics is related to the perception, thought process, and understanding of the user.

Cognitive

Which type of biometrics is based on the perception, thought process, and understanding of the user?

Cognitive biometrics

A U.S. Department of Defense (DoD) smart card that is used for identification of active duty and reserve military personnel along with civilian employees and special contractors is called:

Common Access Card (CAC)

Which of these is a U.S. department of defense (DoD) smart card that is used for identification of active duty and reserve military personnel?

Common access card (CAC)

Authorization and access are viewed as synonymous and in access control, they are the same step

Correct

What is a disadvantage of biometric readers

Cost

The X.500 standard defines a protocol for a client application to access an X.500 directory known as which of the following options?

DAP

Entries within a Directory Information Base are arranged in a tree structure called the:

DIT

Which access control model is considered to be the least restrictive?

Discretionary Access Control

Which term below describes the time it takes for a key to be pressed and then released?

Dwell time

Group policy is a Unix feature that allows for the centralized management and configuration of computers and remote users using Unix Active Directory.

False

Passwords provide strong protection.

False

The strength of RADIUS is that messages are always directly sent between the wireless device and the RADIUS server.

False

Using a rainbow table to crack a password requires three steps: Creation of the table, comparing the table to known hash values, and decrypting the password.

False

The use of a single authentication credential that is shared across multiple networks is called:

Identity management

Why should the account lockout threshold not be set too low?

It could result in denial of service (DoS) attacks.

How is key stretching effective in resisting password attacks?

It takes more time to generate candidate password digests

Select below the authentication system developed by the Massachusetts Institute of Technology (MIT) to verify the identity of network users:

Kerberos

What kind of attack allows for the construction of LDAP statements based on user input statements, which can then be used to access the LDAP database or modify the database's information?

LDAP injection

Which of these algorithms is the weakest for creating password digests?

LM (LAN manager) hash

Which hashing algorithm below is used with NTLMv2's Hashed Message Authentication Code?

MD5

What access control model below is considered to be the most restrictive access control model, and involves assigning access controls to users strictly according to the custodian?

Mandatory Access Control

Which of these is not a reason why users create week passwords?

Most sites force users to create weak passwords even though they do not want to

Which is a token system that requires the user to enter the code along with a pin the called?

Multi factor authentication system

What federated identity management (FIM) relies on token credentials?

OAuth

A vulnerable process that is divided between two or more individuals to prevent fraudulent application of the process is known as:

Separation of duties

The use of one authentication credential to access multiple accounts or applications is referred to as?

Single Sign On

Using one authentication credentials to access multiple accounts or application is known as

Single sign-on

What kind of biometrics utilizes a person's unique physical characteristics for authentication, such as fingerprints or unique characteristics of a person's face?

Standard biometrics

What authentication service commonly used on UNIX devices involves communicating user authentication information to a centralized server?

TACACS

A shield icon warns users if they attempt to access any feature that requires UAC permission.

True

Geolocation is the identification of the location of a person or object using technology, and can be used as part of an authentication method.

True

OpenID is an example of a web based federated identity management (FIM) system.

True

The Bell LaPadula (BLP) model of MAC can be used to prevent subjects from creating a new object or performing specific functions on objects that are at a lower level than their own.

True

Token credentials can be revoked at any time by the user without affecting other token credentials issued to other sites.

True

Which human characteristic is not used for biometric identification?

Weight

Which authentication factor is based on a unique talent that a user possesses?

What you do

What is the name for a predefined framework that can be used for controlling access, and is embedded into software and hardware?

access control model

During RADIUS authentication, what type of packet includes information such as identification of a specific AP that is sending the packet and the username and password?

authentication request

A list of the available nonkeyboard characters can be seen in Windows by opening what utility?

charmap.exe

In a UAC prompt, what color is used to indicate the lowest level of risk?

gray

What is the center of the weakness of passwords?

human memory

What variation of a dictionary attack involves a dictionary attack combined with a brute force attack, and will slightly alter dictionary words by adding numbers to the end of the password, spelling words backward, slightly misspelling words, or including special characters?

hybrid

What type of attack involves an attacker stealing a file containing password digests and comparing the digests with digests created by the attacker?

offline cracking

The action that is taken by a subject over an object is called a(n):

operation

A secret combination of letters, numbers, and/or characters that only the user should have knowledge of, is known as a:

password

Passwords that are transmitted can be captured by what type of software?

protocol analyzer

A user or a process functioning on behalf of the user that attempts to access an object is known as the:

subject