Week 09

Question 1

What is Identity and Access Management (IAM)?

Answer 1

IAM is a framework that ensures the right individuals access the right resources at the right times for the right reasons, involving identification, authentication, authorization, and accountability.

Question 2

T/F: In IAM, the “Subject” is the passive entity containing information, while the “Object” is the entity requesting access.

Answer 2

False. The Subject is the entity requesting access, and the Object is the passive entity containing information.

Question 3

Which of the following is NOT a type of biometric authentication?
A) Fingerprint
B) Iris scan
C) Password
D) Voice recognition

Answer 3

C) Password

Question 4

Fill in the Blank
Q: The three general factors used for authentication are:

Something a person __________ (knowledge factor).
Something a person __________ (possession factor).
Something a person __________ (inherent factor).

Answer 4

knows, has, is

Question 5

What is Single Sign-On (SSO)?

Answer 5

SSO allows a user to authenticate once and access multiple applications or systems without re-authenticating each time.

Question 6

Multi-Factor Authentication (MFA) is more secure than Single-Factor Authentication (SFA) because it requires multiple types of credentials.

Answer 6

True

Question 7

Which access control model grants or denies access based on user roles and responsibilities?
A) Discretionary Access Control (DAC)
B) Role-Based Access Control (RBAC)
C) Mandatory Access Control (MAC)
D) Attribute-Based Access Control (ABAC)

Answer 7

B) Role-Based Access Control (RBAC)

Question 8

The principle of __________ ensures that users only have the minimum level of access necessary to perform their job.

Answer 8

Least Privilege

Question 9

What is the Crossover Error Rate (CER) in biometric systems?

Answer 9

CER is the point at which the False Acceptance Rate (FAR) equals the False Rejection Rate (FRR), used as a measure of biometric system accuracy.

Question 10

A race condition occurs when two processes access the same resource sequentially, ensuring proper authorization and authentication.

Answer 10

False. A race condition occurs when two processes access the same resource concurrently, potentially leading to security flaws.

Question 11

Which of the following is a component of the CIA triad in security principles?
A) Confidentiality
B) Integrity
C) Availability
D) All of the above

Answer 11

D) All of the above

Question 12

__________ is the process of ensuring that users are held responsible for their actions within a system, typically through auditing and logging.

Answer 12

Accountability