Chapter 13: Managing Identity and Authentication

Question 1

____ indicates who is trusted to perform specific operations.

Answer 1

Authorization

Question 2

_____ is the process of tracking and recording subject activities within logs.

Answer 2

Auditing

Question 3

A ____device, or hardware token, is a password-generating device that users can carry with them.

Answer 3

token

Question 4

The ratio of false rejections to valid authentications is known as the ____ rate

sometimes called a Type I error

Answer 4

false rejection (FRR)

Question 5

The ratio of false positives to valid authentications is the____ rate

sometimes called a Type II error

Answer 5

false acceptance (FAR)

Question 6

You can compare the overall quality of biometric devices with the ____, also known as the equal error rate (ERR).

Answer 6

crossover error rate (CER)

Question 7

_____ is any authentication using two or more factors.

Answer 7

Multifactor authentication (MFA)

Question 8

_____ requires two different proofs of identity to provide authentication.

Answer 8

Two-factor authentication (2FA)

Question 9

The _____ provisioning lifecycle refers to the creation, management, and deletion of accounts.

Answer 9

identity and access