SUBJECTS
|
BROWSE
|
CAREER CENTER
|
POPULAR
|
JOIN
|
LOGIN
Business Skills
|
Soft Skills
|
Basic Literacy
|
Certifications
About
|
Help
|
Privacy
|
Terms
|
Email
Search
Test your basic knowledge |
Comptia Security +: Network Access
Start Test
Study First
Subjects
:
certifications
,
comptia-security-+
,
it-skills
Instructions:
Answer 45 questions in 15 minutes.
If you are not ready to take this test, you can
study here
.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.
This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. Token that generates a password based on challenge/response
asynchronous
detective
Clark Wilson
ACLs
2. Form of physical authentication - id/smart card - atm card - token - key - passport - something you __________
something you know
subjects
password policy
have
3. Error caused by biometrics where the system rejects authorized individuals - also know as false rejection rate (FRR)
preventative
brute force
type I
something you know
4. Lists of permission associated with objects - used in the DAC model - typically include a implicit deny rule
Bell La Padula
type II
multifactor
ACLs
5. Procedures -processes - controls that determine access are access control ________
corrective
dictionary
systems
Clark Wilson
6. A password attack that uses a look up table containing pre-computed hashes
two factor
brute force
rainbow table
authentication methods
7. MAC - DAC - and RBAC
synchronous
common locks
physical access control issues
access control models
8. Feature of an OS that allows for logical access control by grouping subjects with common characteristics
multifactor
group policy
crossover error rate
ACLs
9. Using any two authentication methods
something you know
two factor
preventative
asynchronous
10. Tailgating - piggybacking - social engineering
physical access control issues
password types
are
one time
11. Access control model designed to prevent authorized access to classified information - concerned with information confidentiality
password policy
password attacks
Bell La Padula
one time
12. Password length/complexity help defend against this attack
are
cognitive
password cracking
brute force
13. Password type that best defends against password attacks - i.e. tokens
CER
corrective
one time
access control models
14. Form of authentication that relies on human characteristic - fingerprint - hand geometry - facial recognition - eye scan - voice print - DNA - something you _________
Clark Wilson
are
multifactor
access control list
15. Authentication method that include pin - password - code words - personal information
systems
something you know
type I
detective
16. Data can only be accessed through applications - designed to prevent unauthorized modification - errors and fraud
Biba
Clark Wilson
common locks
something you know
17. Password type based on fact or opinion based information - best for authentication that users do not use often - easy to remember
mantrap
have
cognitive
systems
18. Token that generates a password based on time or event
common locks
synchronous
access control models
preventative
19. Cognitive - dynamic - one-time - passphrase
password types
password cracking
access control list
hybrid
20. Set of rules enforced by an OS to enhance security by forcing users to employ strong passwords
Bell La Padula
CER
corrective
password policy
21. Identification - authentication - authorization - accountability
Biba
corrective
mantrap
4 steps of access control
22. Security controls that spot and capture details about a security breach - i.e. a log file
synchronous
password cracking
access control models
detective
23. Data - hardware - networks - facility are access control ________
multifactor
cognitive
objects
password cracking
24. Error caused by biometrics where the system accepts impostors - also know as false acceptance rate (FAR)
Biba
password policy
are
type II
25. Security controls that thwart a security breach - i.e. require user ID and password
Bell La Padula
type I
preventative
something you know
26. Dictionary - hybrid - brute force - rainbow table
password attacks
physical access control issues
asynchronous
two factor
27. Something you know - have - are or location
authentication methods
brute force
password policy
objects
28. The most popular form of authentication
one time
something you know
brute force
4 steps of access control
29. The point at which the false rejection rate equals the false acceptance rate - used to determine the accuracy of biometric systems - low value = high accuracy
rainbow table
group policy
CER
password attacks
30. Access control model that does not allow data to be accessed directly - concerned with separation of duty or function
4 steps of access control
access control models
Clark Wilson
objects
31. Information classification is no write up - no read down
CER
Biba
dictionary
crossover error rate
32. CER stands for...
type II
access control list
Clark Wilson
crossover error rate
33. A small room with two authentication doors - after gaining access to the 1st door the subject is locked in until access to granted to the 2nd door
one time
access control models
mantrap
physical access control issues
34. A password attack that tries all possible combinations until the correct password is identified
detective
Clark Wilson
brute force
type I
35. A password attack that encrypts all the words in the dictionary and compares the resulting hash values with those of the password
ACLs
cognitive
dictionary
mantrap
36. ACL stands for...
mantrap
Clark Wilson
access control list
password types
37. User - programs - processes - requesting permissions are access control ________
dictionary
subjects
corrective
preventative
38. Builds on the dictionary attack by adding numbers and special characters and does some common substitution
hybrid
preventative
physical access control issues
Biba
39. The process of recovering passwords from stored/transmitted data
brute force
are
Biba
password cracking
40. Preset (key in knob) - deadbolt - combination padlock - cipher
are
Biba
implicit deny
common locks
41. Used by most ACLs - also known as deny by default
implicit deny
objects
Bell La Padula
two factor
42. Using three or more authentication methods
multifactor
crossover error rate
implicit deny
mantrap
43. Security controls that fix a problem or prevent further damage
corrective
password types
Bell La Padula
have
44. Access control model concerned with information integrity
password cracking
Biba
mantrap
Clark Wilson
45. Information classification is no read up - no write down
common locks
dictionary
Bell La Padula
preventative