SUBJECTS
|
BROWSE
|
CAREER CENTER
|
POPULAR
|
JOIN
|
LOGIN
Business Skills
|
Soft Skills
|
Basic Literacy
|
Certifications
About
|
Help
|
Privacy
|
Terms
|
Email
Search
Test your basic knowledge |
Comptia Security +: Network Access
Start Test
Study First
Subjects
:
certifications
,
comptia-security-+
,
it-skills
Instructions:
Answer 45 questions in 15 minutes.
If you are not ready to take this test, you can
study here
.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.
This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. Using three or more authentication methods
two factor
something you know
hybrid
multifactor
2. Builds on the dictionary attack by adding numbers and special characters and does some common substitution
access control models
hybrid
preventative
Bell La Padula
3. Form of physical authentication - id/smart card - atm card - token - key - passport - something you __________
CER
brute force
asynchronous
have
4. The point at which the false rejection rate equals the false acceptance rate - used to determine the accuracy of biometric systems - low value = high accuracy
brute force
objects
crossover error rate
CER
5. MAC - DAC - and RBAC
password cracking
access control models
Bell La Padula
detective
6. Token that generates a password based on time or event
Biba
cognitive
synchronous
subjects
7. Lists of permission associated with objects - used in the DAC model - typically include a implicit deny rule
corrective
type I
hybrid
ACLs
8. Security controls that fix a problem or prevent further damage
corrective
asynchronous
systems
implicit deny
9. Password type that best defends against password attacks - i.e. tokens
one time
systems
Biba
brute force
10. Access control model that does not allow data to be accessed directly - concerned with separation of duty or function
group policy
preventative
Clark Wilson
access control models
11. The process of recovering passwords from stored/transmitted data
Bell La Padula
mantrap
cognitive
password cracking
12. Tailgating - piggybacking - social engineering
cognitive
Biba
type II
physical access control issues
13. Set of rules enforced by an OS to enhance security by forcing users to employ strong passwords
password policy
synchronous
something you know
brute force
14. Password type based on fact or opinion based information - best for authentication that users do not use often - easy to remember
ACLs
authentication methods
mantrap
cognitive
15. Security controls that thwart a security breach - i.e. require user ID and password
are
preventative
one time
type II
16. Identification - authentication - authorization - accountability
implicit deny
Clark Wilson
4 steps of access control
asynchronous
17. Data can only be accessed through applications - designed to prevent unauthorized modification - errors and fraud
ACLs
asynchronous
password attacks
Clark Wilson
18. Dictionary - hybrid - brute force - rainbow table
group policy
crossover error rate
detective
password attacks
19. Security controls that spot and capture details about a security breach - i.e. a log file
detective
ACLs
crossover error rate
brute force
20. Used by most ACLs - also known as deny by default
type II
systems
implicit deny
4 steps of access control
21. A password attack that encrypts all the words in the dictionary and compares the resulting hash values with those of the password
type II
multifactor
systems
dictionary
22. CER stands for...
crossover error rate
preventative
common locks
password policy
23. Password length/complexity help defend against this attack
Biba
brute force
dictionary
password attacks
24. Access control model concerned with information integrity
mantrap
crossover error rate
Biba
Clark Wilson
25. Information classification is no write up - no read down
group policy
Biba
objects
Clark Wilson
26. Error caused by biometrics where the system rejects authorized individuals - also know as false rejection rate (FRR)
something you know
type I
access control list
Clark Wilson
27. Authentication method that include pin - password - code words - personal information
Clark Wilson
something you know
ACLs
corrective
28. A small room with two authentication doors - after gaining access to the 1st door the subject is locked in until access to granted to the 2nd door
Biba
objects
mantrap
access control models
29. Preset (key in knob) - deadbolt - combination padlock - cipher
Bell La Padula
common locks
corrective
brute force
30. A password attack that uses a look up table containing pre-computed hashes
mantrap
Clark Wilson
rainbow table
systems
31. A password attack that tries all possible combinations until the correct password is identified
cognitive
brute force
systems
type II
32. Data - hardware - networks - facility are access control ________
have
objects
brute force
rainbow table
33. Form of authentication that relies on human characteristic - fingerprint - hand geometry - facial recognition - eye scan - voice print - DNA - something you _________
are
one time
Bell La Padula
objects
34. ACL stands for...
preventative
cognitive
access control list
brute force
35. Feature of an OS that allows for logical access control by grouping subjects with common characteristics
Biba
group policy
objects
physical access control issues
36. Something you know - have - are or location
dictionary
asynchronous
Biba
authentication methods
37. Information classification is no read up - no write down
access control list
Bell La Padula
corrective
password cracking
38. The most popular form of authentication
physical access control issues
something you know
cognitive
password attacks
39. User - programs - processes - requesting permissions are access control ________
Clark Wilson
subjects
password attacks
Bell La Padula
40. Access control model designed to prevent authorized access to classified information - concerned with information confidentiality
4 steps of access control
group policy
something you know
Bell La Padula
41. Using any two authentication methods
CER
access control models
mantrap
two factor
42. Cognitive - dynamic - one-time - passphrase
something you know
password types
Bell La Padula
authentication methods
43. Token that generates a password based on challenge/response
4 steps of access control
authentication methods
asynchronous
password types
44. Error caused by biometrics where the system accepts impostors - also know as false acceptance rate (FAR)
type II
Biba
asynchronous
access control list
45. Procedures -processes - controls that determine access are access control ________
access control list
systems
4 steps of access control
multifactor