WG MFA Flashcards
Which of these must a RADIUS client have in order to connect to a RADIUS server? (Select two.)
a. The correct IP address known to the RADIUS server
b. The public key of the RADIUS server
c. The shared secret configured on the RADIUS server
d. The certificate of the RADIUS server
e. The administrator account credentials on the RADIUS server
A and C
How do you specify the domain example.local in an LDAP query? (Select one.)
a. ou=example, dc=local
b. dc=example, ou=local
c. dc=example, dc=local
d. ou=example, ou=local
e. ou=”example.local”
C
Which of these authentication factors is the least secure for MFA? (Select one.)
a. Hardware token
b. Software token
c. QR code
d. Push notification
e. One-time password
E
You can install the Logon app on which of the following operating systems? (Select two.)
a. Windows10/11
b. macOS
c. Linux
d. iOS
e. Android
f. Windows7
A and B
You must install the AuthPoint Gateway on an existing RADIUS or LDAP server.
a. True
b. False
B False
On the AuthPoint Users page, what does the yellow dot next to a username indicate?(Select one.)
a. The user account is locked.
b. The user account is blocked.
c. The user account is quarantined.
d. The user forgot their token.
e. The user account is not yet activated.
C
Where in the AuthPoint management UI do you configure the query AuthPoint uses to synchronize users from an LDAP server? (Select one.)
a. Management > Resources
b. Management > External Identities
c. Management > Gateway
d. General > Download
e. General > Settings
B
The AuthPoint Gateway functions as both __________ and __________? (Select two.)
a. an LDAP client
b. an LDAP server
c. a RADIUS client
d. a RADIUS server
A and D
AuthPoint only imports LDAP users that have an email address.
a. True
b. False
A True
Where do you specify the allowed authentication methods for a resource? (Select one.)
a. In the resource configuration
b. In the authentication policy configuration
c. In the user configuration
d. In the policy object configuration
e. In the IdP portal resource
B
What is the AuthPoint metadata used for? (Select one.)
a. To configure SAML authentication with a third-party service provider
b. To configure the Logon app for user authenticationon a Windows computer
c. To configure token security for the AuthPoint Mobile App
d. To configure a VPN client to use AuthPoint for MFA
A
One of your users does not want to use their personal phone for work, and has asked if they can use their tablet instead. This is not possible.
a. True
b. False
B False
If you plan to deploy the Logon app on Windows and Mac computers, you can use the same configuration file for both platforms.
a. True
b. False
A True
A user lost the primary phone that they use for authentication. They did not protect their tokens with a PIN or biometrics. What security action should you take?
a. Delete the user account.
b. Block the token.
c. Block the mobile device.
d. Enable Forgot Token.
e. Migrate the user’s tokens to a new device.
B
During the AuthPoint Gateway installation, you get a permission error. You resolve the permissions problem, but when you try again the Gateway installation still fails. What could be the problem? (Select one.)
a. The LDAP System Account has the wrong credentials in AuthPoint.
b. You are trying to install the 32-bit version of the AuthPoint Gateway on a 64-bit computer.
c. The NPS role is not installed on the AD server.
d. The Gateway Registration Key is invalid because it has already been used.
D
Which resource type does not support the use of the QR code MFA option? (Select one.)
a.RADIUS
b.SAML
c.LogonApp
d.IdPPortal
e.ADFS
A
If you uninstall and then reinstall the AuthPoint Gateway, you can re-use the same registration key when you try to install again.
a. True
b. False
B False
To import a third-party hardware token in your AuthPoint account, you must have:(Select two.)
a. A key file
b. A seed file
c. A token serial number
d. A mobile phone
e. An activation code
A and B
In AuthPoint, SAML resources are the applications and services that can use SAML authentication. Which of the following is a SAML resource? (Select two.)
a. Salesforce
b. Logon app
c. An SSL VPN client
d. ADFS
e. Microsoft 365
A and E
AuthPoint is configured to automatically block a user after ten consecutive failed password attempts, and a token after three consecutive failed token authentications. A hacker with stolen credential attempts to log in as one of your users using the wrong password three times. After the third failed authentication, the user becomes blocked.
a. True
b. False
B False
You can find log messages for the Logon app in the AuthPoint Gatewaylog files
a. True
b. False
B False
You can send RADIUS requests to a secondary AuthPoint Gateway when the primary AuthPoint Gateway is online.
a. True
b. False
A True
What steps are required before you install the AuthPoint Gateway? (Select three.)
a. Make sure the computer you will install the Gateway on has Internet access.
b. Make sure the computer you will install the Gateway on can communicate with your RADIUS clients and Active Directory or LDAP database.
c. Install the Gateway software on all computers in your network with AD Group Policy.
d. Make sure the Gateway configuration file is in the same directory as the Gateway installer software.
e. Make sure you have the Gateway Registration Key for your Gateway.
A, B and E
Each LDAP external identity can only be added to a single primary AuthPoint Gateway.
a. True
b. False
A True