SUBJECTS
|
BROWSE
|
CAREER CENTER
|
POPULAR
|
JOIN
|
LOGIN
Business Skills
|
Soft Skills
|
Basic Literacy
|
Certifications
About
|
Help
|
Privacy
|
Terms
|
Email
Search
Test your basic knowledge |
Comptia Security +: Network Access
Start Test
Study First
Subjects
:
certifications
,
comptia-security-+
,
it-skills
Instructions:
Answer 45 questions in 15 minutes.
If you are not ready to take this test, you can
study here
.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.
This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. Dictionary - hybrid - brute force - rainbow table
password attacks
type I
access control list
brute force
2. Password length/complexity help defend against this attack
rainbow table
synchronous
brute force
hybrid
3. A password attack that encrypts all the words in the dictionary and compares the resulting hash values with those of the password
dictionary
hybrid
type II
detective
4. Procedures -processes - controls that determine access are access control ________
dictionary
something you know
systems
mantrap
5. Lists of permission associated with objects - used in the DAC model - typically include a implicit deny rule
multifactor
have
ACLs
objects
6. Feature of an OS that allows for logical access control by grouping subjects with common characteristics
4 steps of access control
Clark Wilson
ACLs
group policy
7. Using any two authentication methods
rainbow table
multifactor
two factor
authentication methods
8. The point at which the false rejection rate equals the false acceptance rate - used to determine the accuracy of biometric systems - low value = high accuracy
password cracking
physical access control issues
Clark Wilson
CER
9. Builds on the dictionary attack by adding numbers and special characters and does some common substitution
brute force
physical access control issues
something you know
hybrid
10. Password type based on fact or opinion based information - best for authentication that users do not use often - easy to remember
Biba
are
rainbow table
cognitive
11. CER stands for...
systems
Bell La Padula
access control list
crossover error rate
12. The most popular form of authentication
Clark Wilson
something you know
group policy
ACLs
13. Form of physical authentication - id/smart card - atm card - token - key - passport - something you __________
password policy
have
implicit deny
group policy
14. Using three or more authentication methods
type I
physical access control issues
Bell La Padula
multifactor
15. Password type that best defends against password attacks - i.e. tokens
synchronous
one time
subjects
multifactor
16. Set of rules enforced by an OS to enhance security by forcing users to employ strong passwords
password attacks
Biba
password policy
subjects
17. Data can only be accessed through applications - designed to prevent unauthorized modification - errors and fraud
ACLs
preventative
Clark Wilson
password cracking
18. Something you know - have - are or location
are
Bell La Padula
authentication methods
have
19. Information classification is no write up - no read down
Biba
preventative
corrective
two factor
20. Preset (key in knob) - deadbolt - combination padlock - cipher
common locks
password types
something you know
rainbow table
21. Security controls that spot and capture details about a security breach - i.e. a log file
something you know
ACLs
crossover error rate
detective
22. Access control model concerned with information integrity
Biba
type I
password attacks
synchronous
23. Access control model designed to prevent authorized access to classified information - concerned with information confidentiality
systems
4 steps of access control
subjects
Bell La Padula
24. Security controls that thwart a security breach - i.e. require user ID and password
type I
hybrid
preventative
multifactor
25. Access control model that does not allow data to be accessed directly - concerned with separation of duty or function
common locks
detective
mantrap
Clark Wilson
26. A password attack that tries all possible combinations until the correct password is identified
ACLs
brute force
objects
password cracking
27. Token that generates a password based on time or event
detective
synchronous
cognitive
authentication methods
28. Cognitive - dynamic - one-time - passphrase
one time
password types
systems
type I
29. Error caused by biometrics where the system rejects authorized individuals - also know as false rejection rate (FRR)
something you know
implicit deny
crossover error rate
type I
30. MAC - DAC - and RBAC
are
multifactor
access control models
Biba
31. Information classification is no read up - no write down
Clark Wilson
Bell La Padula
one time
CER
32. Error caused by biometrics where the system accepts impostors - also know as false acceptance rate (FAR)
type II
synchronous
brute force
brute force
33. Tailgating - piggybacking - social engineering
password policy
preventative
mantrap
physical access control issues
34. Security controls that fix a problem or prevent further damage
Bell La Padula
Clark Wilson
corrective
cognitive
35. Used by most ACLs - also known as deny by default
crossover error rate
are
implicit deny
password attacks
36. User - programs - processes - requesting permissions are access control ________
4 steps of access control
dictionary
subjects
are
37. Data - hardware - networks - facility are access control ________
objects
systems
implicit deny
password attacks
38. The process of recovering passwords from stored/transmitted data
type I
password cracking
4 steps of access control
synchronous
39. ACL stands for...
implicit deny
Bell La Padula
access control list
brute force
40. A small room with two authentication doors - after gaining access to the 1st door the subject is locked in until access to granted to the 2nd door
Bell La Padula
mantrap
subjects
two factor
41. Authentication method that include pin - password - code words - personal information
access control models
something you know
synchronous
corrective
42. A password attack that uses a look up table containing pre-computed hashes
rainbow table
mantrap
corrective
type I
43. Identification - authentication - authorization - accountability
password cracking
access control models
4 steps of access control
access control list
44. Token that generates a password based on challenge/response
CER
access control list
asynchronous
systems
45. Form of authentication that relies on human characteristic - fingerprint - hand geometry - facial recognition - eye scan - voice print - DNA - something you _________
password cracking
cognitive
dictionary
are