4.3 Given a scenario, implement identity and access management controls.

Question 1

Mandatory Access Control

Answer 1

Most restrictive
Uses Labels (Secret, Top Secret, FOUO)

Question 2

Discretionary access control

Answer 2

Owner Controls

Question 3

Role-based Access control

Answer 3

The position/job you have determines your access
on test (if you see "high turn over" answer will be role based)

Question 4

Rule-based Access control

Answer 4

Pre-defined security rules determine access.

Question 5

Physical Access control

Answer 5

something that physically stops you from entering a building/room/etc

Question 6

Smart Cards

Answer 6

CAC - Government

PIV - Civilian

Question 7

Biometrics

Answer 7

Eyeball,fingerprint

Question 8

Retina Scanner

Answer 8

Scanns the BACK of the eye

Question 9

Iris Scanner

Answer 9

Scans the colored part of the eye

Question 10

HOTP

Answer 10

Will not change until someone uses it

Question 11

TOTP

Answer 11

Changes in a time interval regardless of when you use it. usually changes every 1 minute.

Question 12

IEEE 802.1x

Answer 12

Certificate-based authentication

If you see a question about RADIUS and one answer says 802.1X THAT is the answer,

Question 13

Bitlocker

Answer 13

Encrypts entire harddrive, Microsoft only. only works when you reboot or turnoff your computer.

Question 14

EFS

Answer 14

Encrypting File system - encrypts just the folders you tel it to.

Question 15

What should you encrypt on a Server?

Answer 15

Encrypt sensitive records only not the entire database

Question 16

What form of authorization is based on a scheme of attributes or characteristics related to the user, the object, the system, the application, the network, the service, the time of day, or even other subjective environmental concerns?

A. RBAC
B. MAC
C. DAC
D. ABAC

Answer 16

D. ABAC

Question 17

What type of biometric error increases as the sensitivity of the device increases?
A. FAR
B. FRR
C. CER
D. False Positive

Answer 17

B. FRR

Question 18

Which is the strongest form of password?
A. More than eight characters
B. A password that is used once
C. Static
D. Different types of keyboard characters

Answer 18

B. A password that is used once