SUBJECTS
|
BROWSE
|
CAREER CENTER
|
POPULAR
|
JOIN
|
LOGIN
Business Skills
|
Soft Skills
|
Basic Literacy
|
Certifications
About
|
Help
|
Privacy
|
Terms
|
Email
Search
Test your basic knowledge |
Comptia Security +: Network Access
Start Test
Study First
Subjects
:
certifications
,
comptia-security-+
,
it-skills
Instructions:
Answer 45 questions in 15 minutes.
If you are not ready to take this test, you can
study here
.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.
This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. Preset (key in knob) - deadbolt - combination padlock - cipher
type II
common locks
asynchronous
password types
2. Procedures -processes - controls that determine access are access control ________
systems
password cracking
have
something you know
3. Tailgating - piggybacking - social engineering
physical access control issues
password policy
access control list
Biba
4. Something you know - have - are or location
asynchronous
preventative
authentication methods
crossover error rate
5. Information classification is no write up - no read down
detective
mantrap
Biba
group policy
6. Password length/complexity help defend against this attack
subjects
systems
Clark Wilson
brute force
7. Feature of an OS that allows for logical access control by grouping subjects with common characteristics
Clark Wilson
systems
password types
group policy
8. Authentication method that include pin - password - code words - personal information
password cracking
something you know
brute force
rainbow table
9. Security controls that fix a problem or prevent further damage
something you know
corrective
asynchronous
implicit deny
10. Access control model that does not allow data to be accessed directly - concerned with separation of duty or function
asynchronous
Clark Wilson
subjects
implicit deny
11. CER stands for...
two factor
one time
preventative
crossover error rate
12. Builds on the dictionary attack by adding numbers and special characters and does some common substitution
ACLs
preventative
authentication methods
hybrid
13. Error caused by biometrics where the system rejects authorized individuals - also know as false rejection rate (FRR)
4 steps of access control
type I
multifactor
systems
14. A password attack that encrypts all the words in the dictionary and compares the resulting hash values with those of the password
dictionary
type I
something you know
common locks
15. Password type based on fact or opinion based information - best for authentication that users do not use often - easy to remember
something you know
Clark Wilson
group policy
cognitive
16. Password type that best defends against password attacks - i.e. tokens
one time
Biba
type II
Clark Wilson
17. Information classification is no read up - no write down
group policy
type I
Bell La Padula
password cracking
18. Form of physical authentication - id/smart card - atm card - token - key - passport - something you __________
Clark Wilson
corrective
have
detective
19. Access control model concerned with information integrity
something you know
Biba
type II
access control models
20. ACL stands for...
have
CER
multifactor
access control list
21. Used by most ACLs - also known as deny by default
implicit deny
brute force
detective
password policy
22. The point at which the false rejection rate equals the false acceptance rate - used to determine the accuracy of biometric systems - low value = high accuracy
CER
Clark Wilson
synchronous
brute force
23. A small room with two authentication doors - after gaining access to the 1st door the subject is locked in until access to granted to the 2nd door
mantrap
preventative
4 steps of access control
Biba
24. User - programs - processes - requesting permissions are access control ________
rainbow table
subjects
something you know
have
25. The process of recovering passwords from stored/transmitted data
password cracking
type I
group policy
mantrap
26. MAC - DAC - and RBAC
password policy
access control models
synchronous
password cracking
27. Using three or more authentication methods
multifactor
crossover error rate
detective
dictionary
28. Set of rules enforced by an OS to enhance security by forcing users to employ strong passwords
synchronous
corrective
access control models
password policy
29. Identification - authentication - authorization - accountability
common locks
synchronous
4 steps of access control
something you know
30. A password attack that tries all possible combinations until the correct password is identified
access control models
brute force
dictionary
subjects
31. Data can only be accessed through applications - designed to prevent unauthorized modification - errors and fraud
corrective
something you know
Clark Wilson
mantrap
32. Security controls that thwart a security breach - i.e. require user ID and password
type II
preventative
cognitive
Biba
33. The most popular form of authentication
corrective
something you know
password cracking
have
34. Lists of permission associated with objects - used in the DAC model - typically include a implicit deny rule
group policy
cognitive
4 steps of access control
ACLs
35. Token that generates a password based on challenge/response
asynchronous
one time
are
rainbow table
36. Token that generates a password based on time or event
preventative
synchronous
crossover error rate
Bell La Padula
37. Dictionary - hybrid - brute force - rainbow table
multifactor
two factor
brute force
password attacks
38. Cognitive - dynamic - one-time - passphrase
one time
password types
Clark Wilson
access control list
39. A password attack that uses a look up table containing pre-computed hashes
password cracking
common locks
something you know
rainbow table
40. Using any two authentication methods
implicit deny
two factor
corrective
synchronous
41. Access control model designed to prevent authorized access to classified information - concerned with information confidentiality
corrective
cognitive
detective
Bell La Padula
42. Data - hardware - networks - facility are access control ________
ACLs
objects
preventative
Clark Wilson
43. Security controls that spot and capture details about a security breach - i.e. a log file
Clark Wilson
access control list
subjects
detective
44. Error caused by biometrics where the system accepts impostors - also know as false acceptance rate (FAR)
type II
access control models
one time
objects
45. Form of authentication that relies on human characteristic - fingerprint - hand geometry - facial recognition - eye scan - voice print - DNA - something you _________
one time
brute force
Biba
are