Quick Tips 4

Question 1

BLANK is a type of social engineering with the goal of obtaining personal information, credentials, credit card numbers, or financial data.

Answer 1

Phishing

Question 2

A BLANK is possible when two or more processes use a shared resource and the access steps could take place out of sequence

Answer 2

race condition

Question 3

BLANK is when two entities must authenticate to each other before sending data back and forth. Also referred to as two-way authentication.

Answer 3

Mutual authentication

Question 4

A BLANK is a software component that stores, organizes, and provides access to resources, which are listed in a directory (listing) of resources. Individual resources are assigned names within a namespace.

Answer 4

directory service

Question 5

A BLANK is data that are held permanently on a hard drive in the format of a text file or held temporarily in memory. It can be used to store browsing habits, authentication data, or protocol state information.

Answer 5

cookie

Question 6

A BLANK is a portable identity, and its associated entitlements, that can be used across business boundaries without the need to synchronize or consolidate directory information.

Answer 6

federated identity

Question 7

BLANK is a set of rules for encoding documents in machine-readable form to allow for interoperability between various web-based technologies.

Answer 7

Extensible Markup Language (XML)

Question 8

BLANK is an XML-based framework, being developed by OASIS, for exchanging user, resource, and service provisioning information between cooperating organizations.

Answer 8

Service Provisioning Markup Language (SPML)

Question 9

BLANK a declarative access control policy language implemented in XML and a processing model, describes how to interpret security policies.

Answer 9

eXtensible Access Control Markup Language (XACML)

Question 10

BLANK is a form of network attack in which a valid data transmission is maliciously or fraudulently repeated with the goal of obtaining unauthorized access.

Answer 10

Replay attack

Question 11

BLANK is a threshold value. Once a threshold value is passed, the activity is considered to be an event that is logged, investigated, or both.

Answer 11

Clipping level

Question 12

BLANK is a set of precomputed hash values that represent password combinations. These are used in password attack processes and usually produce results more quickly than dictionary or brute force attacks.

Answer 12

Rainbow table

Question 13

BLANK are fact- or opinion-based information used to verify an individual’s identity.

Answer 13

Cognitive passwords

Question 14

BLANK can require physical interaction with a reader (contact) or no physical interaction with the reader (contactless architectures). Two contactless architectures are BLANK and BLANK.

Answer 14

Smart cards, combi (one chip), hybrid (two chips)