SUBJECTS
|
BROWSE
|
CAREER CENTER
|
POPULAR
|
JOIN
|
LOGIN
Business Skills
|
Soft Skills
|
Basic Literacy
|
Certifications
About
|
Help
|
Privacy
|
Terms
|
Email
Search
Test your basic knowledge |
Comptia Security +: Network Access
Start Test
Study First
Subjects
:
certifications
,
comptia-security-+
,
it-skills
Instructions:
Answer 45 questions in 15 minutes.
If you are not ready to take this test, you can
study here
.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.
This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. Feature of an OS that allows for logical access control by grouping subjects with common characteristics
group policy
implicit deny
password types
synchronous
2. Preset (key in knob) - deadbolt - combination padlock - cipher
common locks
multifactor
password attacks
type II
3. Authentication method that include pin - password - code words - personal information
rainbow table
something you know
asynchronous
subjects
4. Security controls that fix a problem or prevent further damage
type II
corrective
brute force
something you know
5. Access control model concerned with information integrity
implicit deny
Bell La Padula
Biba
type I
6. The most popular form of authentication
two factor
detective
one time
something you know
7. A password attack that uses a look up table containing pre-computed hashes
type II
CER
rainbow table
4 steps of access control
8. Using three or more authentication methods
multifactor
something you know
password types
corrective
9. Form of authentication that relies on human characteristic - fingerprint - hand geometry - facial recognition - eye scan - voice print - DNA - something you _________
ACLs
are
type I
password cracking
10. Error caused by biometrics where the system rejects authorized individuals - also know as false rejection rate (FRR)
have
type I
4 steps of access control
password attacks
11. ACL stands for...
are
preventative
access control list
two factor
12. A password attack that tries all possible combinations until the correct password is identified
ACLs
access control list
rainbow table
brute force
13. Data - hardware - networks - facility are access control ________
two factor
objects
ACLs
are
14. Dictionary - hybrid - brute force - rainbow table
Bell La Padula
preventative
password attacks
are
15. Information classification is no write up - no read down
Biba
type I
multifactor
authentication methods
16. Lists of permission associated with objects - used in the DAC model - typically include a implicit deny rule
detective
ACLs
synchronous
4 steps of access control
17. The point at which the false rejection rate equals the false acceptance rate - used to determine the accuracy of biometric systems - low value = high accuracy
are
Biba
two factor
CER
18. MAC - DAC - and RBAC
access control models
access control list
password policy
one time
19. The process of recovering passwords from stored/transmitted data
group policy
password cracking
corrective
CER
20. Procedures -processes - controls that determine access are access control ________
brute force
authentication methods
type I
systems
21. Using any two authentication methods
password types
two factor
Biba
Clark Wilson
22. CER stands for...
dictionary
group policy
crossover error rate
brute force
23. A small room with two authentication doors - after gaining access to the 1st door the subject is locked in until access to granted to the 2nd door
have
mantrap
cognitive
Biba
24. A password attack that encrypts all the words in the dictionary and compares the resulting hash values with those of the password
cognitive
one time
dictionary
access control list
25. Builds on the dictionary attack by adding numbers and special characters and does some common substitution
multifactor
systems
CER
hybrid
26. Security controls that thwart a security breach - i.e. require user ID and password
implicit deny
one time
access control models
preventative
27. Access control model that does not allow data to be accessed directly - concerned with separation of duty or function
Bell La Padula
Clark Wilson
access control models
have
28. Password type that best defends against password attacks - i.e. tokens
one time
group policy
Bell La Padula
Biba
29. Used by most ACLs - also known as deny by default
physical access control issues
asynchronous
implicit deny
mantrap
30. Form of physical authentication - id/smart card - atm card - token - key - passport - something you __________
have
CER
password attacks
multifactor
31. Error caused by biometrics where the system accepts impostors - also know as false acceptance rate (FAR)
mantrap
group policy
type I
type II
32. Information classification is no read up - no write down
corrective
access control list
something you know
Bell La Padula
33. Identification - authentication - authorization - accountability
have
CER
password types
4 steps of access control
34. Access control model designed to prevent authorized access to classified information - concerned with information confidentiality
common locks
Bell La Padula
Clark Wilson
password policy
35. Cognitive - dynamic - one-time - passphrase
Biba
objects
password types
asynchronous
36. Token that generates a password based on time or event
synchronous
Clark Wilson
mantrap
subjects
37. Password type based on fact or opinion based information - best for authentication that users do not use often - easy to remember
systems
asynchronous
cognitive
subjects
38. Password length/complexity help defend against this attack
implicit deny
brute force
crossover error rate
ACLs
39. Something you know - have - are or location
type I
4 steps of access control
access control list
authentication methods
40. User - programs - processes - requesting permissions are access control ________
crossover error rate
subjects
synchronous
Bell La Padula
41. Set of rules enforced by an OS to enhance security by forcing users to employ strong passwords
systems
type II
password policy
brute force
42. Tailgating - piggybacking - social engineering
multifactor
common locks
physical access control issues
Biba
43. Data can only be accessed through applications - designed to prevent unauthorized modification - errors and fraud
objects
one time
Clark Wilson
multifactor
44. Security controls that spot and capture details about a security breach - i.e. a log file
type I
CER
implicit deny
detective
45. Token that generates a password based on challenge/response
CER
asynchronous
something you know
access control models