SUBJECTS
|
BROWSE
|
CAREER CENTER
|
POPULAR
|
JOIN
|
LOGIN
Business Skills
|
Soft Skills
|
Basic Literacy
|
Certifications
About
|
Help
|
Privacy
|
Terms
|
Email
Search
Test your basic knowledge |
Comptia Security +: Network Access
Start Test
Study First
Subjects
:
certifications
,
comptia-security-+
,
it-skills
Instructions:
Answer 45 questions in 15 minutes.
If you are not ready to take this test, you can
study here
.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.
This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. Data - hardware - networks - facility are access control ________
4 steps of access control
objects
mantrap
rainbow table
2. Access control model concerned with information integrity
Biba
corrective
asynchronous
synchronous
3. Cognitive - dynamic - one-time - passphrase
password attacks
ACLs
password types
synchronous
4. Used by most ACLs - also known as deny by default
something you know
type II
one time
implicit deny
5. Authentication method that include pin - password - code words - personal information
have
objects
Clark Wilson
something you know
6. User - programs - processes - requesting permissions are access control ________
subjects
access control list
synchronous
hybrid
7. Password type based on fact or opinion based information - best for authentication that users do not use often - easy to remember
cognitive
password attacks
password types
ACLs
8. Password length/complexity help defend against this attack
ACLs
physical access control issues
brute force
one time
9. Access control model that does not allow data to be accessed directly - concerned with separation of duty or function
CER
Clark Wilson
Bell La Padula
subjects
10. Security controls that spot and capture details about a security breach - i.e. a log file
implicit deny
detective
Biba
type II
11. MAC - DAC - and RBAC
access control models
corrective
password types
ACLs
12. A password attack that encrypts all the words in the dictionary and compares the resulting hash values with those of the password
4 steps of access control
dictionary
hybrid
brute force
13. Procedures -processes - controls that determine access are access control ________
password policy
one time
something you know
systems
14. A small room with two authentication doors - after gaining access to the 1st door the subject is locked in until access to granted to the 2nd door
brute force
mantrap
cognitive
Clark Wilson
15. The process of recovering passwords from stored/transmitted data
authentication methods
password cracking
asynchronous
access control models
16. Token that generates a password based on challenge/response
group policy
password cracking
synchronous
asynchronous
17. A password attack that uses a look up table containing pre-computed hashes
rainbow table
systems
have
synchronous
18. Identification - authentication - authorization - accountability
subjects
4 steps of access control
CER
detective
19. Data can only be accessed through applications - designed to prevent unauthorized modification - errors and fraud
hybrid
cognitive
Clark Wilson
access control list
20. Error caused by biometrics where the system accepts impostors - also know as false acceptance rate (FAR)
type II
systems
password policy
physical access control issues
21. Password type that best defends against password attacks - i.e. tokens
one time
password cracking
password types
detective
22. The most popular form of authentication
preventative
cognitive
crossover error rate
something you know
23. Information classification is no write up - no read down
Biba
ACLs
subjects
implicit deny
24. The point at which the false rejection rate equals the false acceptance rate - used to determine the accuracy of biometric systems - low value = high accuracy
asynchronous
group policy
multifactor
CER
25. Using three or more authentication methods
brute force
one time
crossover error rate
multifactor
26. ACL stands for...
dictionary
access control list
cognitive
Bell La Padula
27. CER stands for...
one time
physical access control issues
crossover error rate
detective
28. Access control model designed to prevent authorized access to classified information - concerned with information confidentiality
Bell La Padula
one time
have
cognitive
29. Tailgating - piggybacking - social engineering
hybrid
multifactor
physical access control issues
Biba
30. Form of physical authentication - id/smart card - atm card - token - key - passport - something you __________
have
are
synchronous
group policy
31. Security controls that fix a problem or prevent further damage
CER
rainbow table
corrective
something you know
32. Lists of permission associated with objects - used in the DAC model - typically include a implicit deny rule
synchronous
ACLs
one time
type I
33. Something you know - have - are or location
password attacks
authentication methods
asynchronous
implicit deny
34. Token that generates a password based on time or event
ACLs
subjects
synchronous
Clark Wilson
35. Using any two authentication methods
CER
corrective
two factor
dictionary
36. A password attack that tries all possible combinations until the correct password is identified
Biba
Clark Wilson
4 steps of access control
brute force
37. Feature of an OS that allows for logical access control by grouping subjects with common characteristics
group policy
implicit deny
password types
authentication methods
38. Error caused by biometrics where the system rejects authorized individuals - also know as false rejection rate (FRR)
password cracking
Bell La Padula
type I
access control models
39. Dictionary - hybrid - brute force - rainbow table
password attacks
access control models
brute force
CER
40. Security controls that thwart a security breach - i.e. require user ID and password
Bell La Padula
access control models
preventative
type II
41. Preset (key in knob) - deadbolt - combination padlock - cipher
common locks
something you know
cognitive
4 steps of access control
42. Form of authentication that relies on human characteristic - fingerprint - hand geometry - facial recognition - eye scan - voice print - DNA - something you _________
are
one time
dictionary
physical access control issues
43. Builds on the dictionary attack by adding numbers and special characters and does some common substitution
cognitive
asynchronous
hybrid
brute force
44. Set of rules enforced by an OS to enhance security by forcing users to employ strong passwords
access control list
objects
password policy
password types
45. Information classification is no read up - no write down
multifactor
Biba
Bell La Padula
asynchronous