Quiz 11

Question 1

he use of what item below involves the creation of a large pre-generated data set of candidate digests?

A) rainbow tables

B) randomized character list

C) word list

D) cascade tables

Answer 1

rainbow tables

Question 2

The use of one authentication credential to access multiple accounts or applications is referred to as which of the following?

A) individual Sign On

B) single Sign On

C) unilateral Sign On

D) federated Sign On

Answer 2

Single Sign On

Question 3

What specific type of authentication can be based on where the user is located?

A) GPS

B) somewhere locating

C) geocache

D) geolocation

Answer 3

geolocation

Question 4

Open ID Connect is an Authentication protocol that can be used in OAuth 2.0 as a standard means to obtain user identity.
True
False

Answer 4

True

Question 5

Passwords provide strong protection.
True
False

Answer 5

False

Question 6

Brute force attacks can be very slow because every character combination must be generated.

True
False

Answer 6

True

Question 7

A hardware security token is typically a small device with a window display.

True
False

Answer 7

True

Question 8

A TOTP changes after a set period.

True
False

Answer 8

True

Question 9

Keystroke dynamics uses two unique typing variables.

True
False

Answer 9

True

Question 10

A retina scanner has become the most common type of standard biometrics.

True
False

Answer 10

False

Question 11

Voice recognition is identical to speech recognition.

True
False

Answer 11

False

Question 12

Most password attacks today are an offline attack.

True
False

Answer 12

True

Question 13

What federation system technology uses federation standards to provide SSO and exchanging attributes?
OAuth
Open ID Connect
Windows Live ID
Shibboleth

Answer 13

Shibboleth

Question 14

What option below represents an example of behavioral biometrics?
user dynamics
keystroke dynamics
facial recognition
fingerprint recognition

Answer 14

keystroke dynamics

Question 15

What type of card contains an integrated circuit chip that can hold information, which then can be used as part of the authentication process?
smart card
SIM card
E-card
BioCard

Answer 15

smart card

Question 16

If a user has more than one type of authentication credential, what type of authentication is being used?
pattern authentication
verified authentication
multifactor authentication
token authentication

Answer 16

multifactor authentication

Question 17

Which term below describes the time it takes for a key to be pressed and then released?
dwell time
lead time
sync time
react time

Answer 17

dwell time

Question 18

What term best describes managing the login credentials such as passwords in user accounts?
account management
user management
credential management
password management

Answer 18

credential management

Question 19

A list of the available nonkeyboard characters can be seen in Windows by opening what utility?
charmap.exe
charlist.exe
chardump.exe
listchar.exe

Answer 19

charmap.exe

Question 20

What technology is an open source federation framework and supports the development of authorization protocols?
Shibboleth
OAuth
SAML
Kerberos

Answer 20

Oauth

Question 21

Which of the following is a category of group password settings in Microsoft Windows? (Choose all that apply.)
Password Policy Settings
Account Policy Settings
Password Lockout Policy
Account Lockout Policy

Answer 21

Password Policy Settings,
Account Lockout Policy

Question 22

What type of authentication is based on what the user has?
software token
hardware token
security token
identity token

Answer 22

security token

Question 23

What is the main weakness associated with the use of passwords?
human memory
encryption technology
handshake technology
human reliability

Answer 23

human memory

Question 24

A secret combination of letters, numbers, and/or characters that only the user should have knowledge of, is known as a:
token
password
biometric detail
challenge

Answer 24

password

Question 25

Which of the following are key stretching password hash algorithms? (Choose all that apply.) bcrypt PBKDF2 seq02 SHA-256

Answer 25

bcrypt PBKDF2

Question 26

What type of attack conducts a statistical analysis of the stolen passwords that is then used to create a mask to break the largest number of passwords? character set attack binary attack mask attack rule attack

Answer 26

rule attack

Question 27

Which of the following account lockout policy settings determines the number of failed login attempts before a lockout occurs? system lockout threshold account lockout threshold administrator lockout threshold user lockout threshold

Answer 27

account lockout threshold

Question 28

Which of the following is NOT a valid biometric disadvantage? crossover error rate false acceptance rate false error rate false rejection rate

Answer 28

false error rate

Question 29

What federated identity management (FIM) relies on token credentials? OAuth OpenID Shibboleth OpenPass

Answer 29

Oauth

Question 30

A U.S. Department of Defense (DoD) smart card that is used for identification of active-duty and reserve military personnel along with civilian employees and special contractors is called: Common Access Card (CAC) Identity Validation Card (IVC) Credential Validation Card (CVC) Personal Credential Card (PCC)

Answer 30

Common Access Card (CAC)

Question 31

Which of the following accounts is a user account that is created explicitly to provide a security context for services running on a server? service account shared account system account privileged account

Answer 31

service account

Question 32

Which type of biometrics is based on the perception, thought process, and understanding of the user? cognitive biometrics reactive biometrics standard biometrics physical biometrics

Answer 32

cognitive biometrics

Question 33

The use of a single authentication credential that is shared across multiple networks is called: access management authorization management identity management risk management

Answer 33

identity management

Question 34

What kind of biometrics utilizes a person's unique physical characteristics for authentication, such as fingerprints or unique characteristics of a person's face? cognitive biometrics reactive biometrics standard biometrics physical biometrics

Answer 34

standard biometrics

Question 35

What variation of a dictionary attack involves a dictionary attack combined with a brute force attack, and will slightly alter dictionary words by adding numbers to the end of the password, spelling words backward, slightly misspelling words, or including special characters? brute force hash replay network replay hybrid

Answer 35

hybrid

Question 36

Which of the following is a is a two-way relationship that is automatically created between parent and child domains in a Microsoft Active Directory forest? double trust federated trust transitive trust domain trust

Answer 36

transitive trust

Question 37

What type of attack involves using every possible combination of letters, numbers, and characters to create candidate digests that are then matched against those in a stolen digest file? Space division Brute force Known ciphertext Known plaintext

Answer 37

Brute force

Question 38

What can be used to increase the strength of hashed passwords? salt key stretching double hashing single crypting

Answer 38

salt

Question 39

Hash algorithms like MD5 and SHA are considered secure for creating digests because these hashing algorithms are designed to create a digest as strong as possible. True False

Answer 39

False

Question 40

Which of the following options prevents a logon after a set number of failed logon attempts within a specified period and can also specify the length of time that the lockout is in force? password lock logon lock password lockout logon lockout

Answer 40

password lockout

Question 41

Which of the following is a two-way relationship that is automatically created between parent and child domains in a Microsoft Active Directory forest? double trust transitive trust federated trust domain trust

Answer 41

transitive trust

Question 42

The use of what item below involves the creation of a large pre-generated data set of candidate digests? cascade tables word list randomized character list rainbow tables

Answer 42

rainbow tables