15 - User Authentication and Access Control Overview Flashcards

1
Q

What does AAA stand for?

A

Authentication, authorization, and accounting

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

___ describes the process of granting or denying access to data and network resources as well as verifying that the security controls are working properly.

A

AAA (Authentication, authorization, and accounting)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Confirms the user is who they claim to be. First step in AAA.

A

Authentication

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Defines what the user is able to access. Second step in AAA.

A

authorization

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Report on the access that a user has been granted, including how often the user accesses the resource or data. Final step in AAA.

A

accounting

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What does MFA stand for?

A

Multi-factor authentication

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What does 2FA stand for?

A

2-factor authentication

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

The point of ___ is that even if someone steals your password through social engineering, brute force attacks, or any other way, they cannot access your device or data without the key fob, or without a fingerprint or face.

A

MFA

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Which part of AAA does the following describe:

Confirm user is who they claim to be

A

Authentication

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Which part of AAA does the following describe:

Usernames and passwords

A

Authentication

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Which part of AAA does the following describe:

PKI certificates

A

Authentication

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What does PKI stand for?

A

public key infrastructure

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Which part of AAA does the following describe:

Define what the user can access

A

Authorization

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Which part of AAA does the following describe:

Give permissions to a user

A

Authorizations

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Which part of AAA does the following describe:

Write and delete, or read-only

A

authorization

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Which part of AAA does the following describe:

Report on user’s access

A

accounting

17
Q

Which part of AAA does the following describe:

Provides forensic trail after a security breach

A

accounting

18
Q

Which part of AAA does the following describe:

Logs successful and unsuccessful connection attempts

A

accounting