Chapter 2 - Practice Questions

2. Ned is reviewing password security for employees of The Leftorium. The password policy has the following settings: • The password maximum age is 30 days. • The password minimum length is 14 characters. • Passwords cannot be reused until five other passwords have been used. • Passwords must include at least one of each of the following four character types: uppercase letters, lowercase letters, numbers, and special characters. Ned discovers that despite having this password policy in place, users are still using the same password that they were using more than a month ago. Which of the following actions will resolve this issue? A. Create a rule in the password policy for the password minimum age to be 7 days. B. Change the password history to 10. C. Require the use of complex passwords. D. Change the maximum age setting to 60 days.

A.

5. Your organization recently updated an online application that employees use to log on when working from home. Employees enter their username and password into the application from their smartphone and the application logs their location using GPS. Which type of authentication is being used? A. One-factor B. Dual-factor C. Something you are D. Somewhere you are

A.

7. Lisa is a training instructor and she maintains a training lab with 18 computers. She has enough rights and permissions on these machines so that she can configure them as needed for classes. However, she does not have the rights to add them to the organization's domain. Which of the following choices BEST describes this example? A. Least privilege B. Need to know C. Group-based privileges D. Location-based policies

A.

14. A security administrator needs to implement an access control system that will protect data based on the following matrix. (Note that this matrix only represents a subset of the overall requirements.) Which of the following models is the administrator implementing? A. DAC B. MAC C. Role-BAC D. ABAC

B.

3. Your organization is planning to implement remote access capabilities. Management wants strong authentication and wants to ensure that passwords expire after a predefined time interval. Which of the following choices BEST meets this requirement? A. HOTP B. TOTP C. CAC D. Kerberos

B.

10. Members of a project team chose to meet at a local library to complete some work on a key project. All of them are authorized to work from home using a VPN connection and have connected from home successfully. However, they found that they were unable to connect to the network using the VPN from the library and they could not access any of the project data. Which of the following choices is the MOST likely reason why they can't access this data? A. Role-based access control B. Time-of-day access control C. Location-based policy D. Discretionary access control

C.

11. You need to create an account for a contractor who will be working at your company for 60 days. Which of the following is the BEST security step to take when creating this account? A. Configure history on the account. B. Configure a password expiration date on the account. C. Configure an expiration date on the account. D. Configure complexity.

C.

12. A company recently hired you as a security administrator. You notice that some former accounts used by temporary employees are currently enabled. Which of the following choices is the BEST response? A. Disable all the temporary accounts. B. Disable the temporary accounts you've noticed are enabled. C. Craft a script to identify inactive accounts based on the last time they logged on. D. Set account expiration dates for all accounts when creating them.

C.

4. Your organization has decided to implement a biometric solution for authentication. One of the goals is to ensure that the biometric system is highly accurate. Which of the following provides the BEST indication of accuracy with the biometric system? A. The lowest possible FRR B. The highest possible FAR C. The lowest possible CER D. The highest possibleCER

C.

1. Developers in your organization have created an application designed for the sales team. Salespeople can log on to the application using a simple password of 1234. However, this password does not meet the organization's password policy. Which of the following is the BEST response by the security administrator after learning about this? A. Nothing. Strong passwords aren't required in applications. B. Modify the security policy to accept this password. C. Document this as an exception in the application's documentation. D. Direct the application team manager to ensure the application adheres to the organization's password policy.

D.

13. Developers are planning to develop an application using role-based access control. Which of the following would they MOST likely include in their planning? A. A listing of labels reflecting classification levels B. A requirements list identifying need to know C. A listing of owners D. A matrix of functions matched with their required privileges

D.

15. Your organization is implementing an SDN. Management wants to use an access control model that controls access based on attributes. Which of the following is the BEST solution? A. DAC B. MAC C. Role-BAC D. ABAC

D.

6. A network includes a ticket-granting ticket server used for authentication. Which authentication service does this network use? A. Shibboleth B. SAML C. LDAP D. Kerberos

D.

8. Marge is reviewing an organization's account management processes. She wants to ensure that security log entries accurately report the identityof personnel taking specific actions. Which of the following steps would BEST meet this requirement? A. Update ACLs for all files and folders. B. Implement role-based privileges. C. Use an SSO solution. D. Remove all shared accounts.

D.

9. A recent security audit discovered several apparently dormant user accounts. Although users could log on to the accounts, no one had logged on to them for more than 60 days. You later discovered that these accounts are for contractors who work approximately one week every quarter. Which of the following is the BEST response to this situation? A. Remove the account expiration from the accounts. B. Delete the accounts. C. Reset the accounts. D. Disable the accounts.

D.