SUBJECTS
|
BROWSE
|
CAREER CENTER
|
POPULAR
|
JOIN
|
LOGIN
Business Skills
|
Soft Skills
|
Basic Literacy
|
Certifications
About
|
Help
|
Privacy
|
Terms
Search
Test your basic knowledge |
Comptia Security +: Network Access
Start Test
Study First
Subjects
:
certifications
,
comptia-security-+
,
it-skills
Instructions:
Answer 45 questions in 15 minutes.
If you are not ready to take this test, you can
study here
.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.
This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. Security controls that spot and capture details about a security breach - i.e. a log file
synchronous
Bell La Padula
password attacks
detective
2. Access control model concerned with information integrity
multifactor
Biba
authentication methods
something you know
3. Token that generates a password based on time or event
cognitive
synchronous
type I
two factor
4. A password attack that tries all possible combinations until the correct password is identified
brute force
mantrap
password cracking
one time
5. Dictionary - hybrid - brute force - rainbow table
password attacks
password policy
group policy
4 steps of access control
6. Procedures -processes - controls that determine access are access control ________
something you know
something you know
systems
authentication methods
7. Used by most ACLs - also known as deny by default
implicit deny
one time
password attacks
password policy
8. Password length/complexity help defend against this attack
asynchronous
password cracking
brute force
crossover error rate
9. Information classification is no read up - no write down
group policy
Bell La Padula
ACLs
CER
10. Data - hardware - networks - facility are access control ________
mantrap
objects
dictionary
physical access control issues
11. CER stands for...
password attacks
password types
are
crossover error rate
12. Form of physical authentication - id/smart card - atm card - token - key - passport - something you __________
password cracking
type I
have
implicit deny
13. Token that generates a password based on challenge/response
rainbow table
two factor
brute force
asynchronous
14. Error caused by biometrics where the system accepts impostors - also know as false acceptance rate (FAR)
access control models
type II
password policy
objects
15. The point at which the false rejection rate equals the false acceptance rate - used to determine the accuracy of biometric systems - low value = high accuracy
CER
asynchronous
password cracking
multifactor
16. Tailgating - piggybacking - social engineering
brute force
two factor
Bell La Padula
physical access control issues
17. MAC - DAC - and RBAC
access control models
cognitive
brute force
ACLs
18. A small room with two authentication doors - after gaining access to the 1st door the subject is locked in until access to granted to the 2nd door
authentication methods
mantrap
objects
multifactor
19. Data can only be accessed through applications - designed to prevent unauthorized modification - errors and fraud
crossover error rate
implicit deny
Clark Wilson
CER
20. Preset (key in knob) - deadbolt - combination padlock - cipher
password cracking
corrective
common locks
password types
21. Builds on the dictionary attack by adding numbers and special characters and does some common substitution
asynchronous
access control models
type I
hybrid
22. Password type based on fact or opinion based information - best for authentication that users do not use often - easy to remember
brute force
password types
something you know
cognitive
23. Authentication method that include pin - password - code words - personal information
corrective
detective
authentication methods
something you know
24. Security controls that thwart a security breach - i.e. require user ID and password
something you know
preventative
Biba
authentication methods
25. Form of authentication that relies on human characteristic - fingerprint - hand geometry - facial recognition - eye scan - voice print - DNA - something you _________
are
brute force
password attacks
preventative
26. Feature of an OS that allows for logical access control by grouping subjects with common characteristics
group policy
asynchronous
multifactor
password policy
27. Security controls that fix a problem or prevent further damage
Clark Wilson
are
brute force
corrective
28. Information classification is no write up - no read down
multifactor
password cracking
ACLs
Biba
29. Cognitive - dynamic - one-time - passphrase
CER
rainbow table
password types
something you know
30. A password attack that uses a look up table containing pre-computed hashes
rainbow table
physical access control issues
Clark Wilson
password attacks
31. Identification - authentication - authorization - accountability
Bell La Padula
hybrid
4 steps of access control
common locks
32. The most popular form of authentication
detective
Biba
access control list
something you know
33. Access control model designed to prevent authorized access to classified information - concerned with information confidentiality
Bell La Padula
4 steps of access control
crossover error rate
Clark Wilson
34. ACL stands for...
synchronous
access control list
Clark Wilson
brute force
35. Password type that best defends against password attacks - i.e. tokens
Clark Wilson
cognitive
one time
two factor
36. User - programs - processes - requesting permissions are access control ________
detective
authentication methods
Bell La Padula
subjects
37. Error caused by biometrics where the system rejects authorized individuals - also know as false rejection rate (FRR)
access control models
password attacks
password policy
type I
38. A password attack that encrypts all the words in the dictionary and compares the resulting hash values with those of the password
are
dictionary
brute force
authentication methods
39. Using three or more authentication methods
Clark Wilson
multifactor
Bell La Padula
preventative
40. Access control model that does not allow data to be accessed directly - concerned with separation of duty or function
CER
Clark Wilson
one time
implicit deny
41. Something you know - have - are or location
authentication methods
Biba
detective
two factor
42. Set of rules enforced by an OS to enhance security by forcing users to employ strong passwords
subjects
multifactor
password policy
two factor
43. Lists of permission associated with objects - used in the DAC model - typically include a implicit deny rule
multifactor
are
ACLs
4 steps of access control
44. Using any two authentication methods
synchronous
Bell La Padula
two factor
password cracking
45. The process of recovering passwords from stored/transmitted data
password cracking
password attacks
objects
detective