SUBJECTS
|
BROWSE
|
CAREER CENTER
|
POPULAR
|
JOIN
|
LOGIN
Business Skills
|
Soft Skills
|
Basic Literacy
|
Certifications
About
|
Help
|
Privacy
|
Terms
|
Email
Search
Test your basic knowledge |
Comptia Security +: Network Access
Start Test
Study First
Subjects
:
certifications
,
comptia-security-+
,
it-skills
Instructions:
Answer 45 questions in 15 minutes.
If you are not ready to take this test, you can
study here
.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.
This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. Procedures -processes - controls that determine access are access control ________
systems
Clark Wilson
authentication methods
detective
2. Security controls that fix a problem or prevent further damage
type I
common locks
corrective
access control list
3. MAC - DAC - and RBAC
crossover error rate
CER
access control models
ACLs
4. Access control model that does not allow data to be accessed directly - concerned with separation of duty or function
group policy
mantrap
Bell La Padula
Clark Wilson
5. Identification - authentication - authorization - accountability
type I
something you know
4 steps of access control
cognitive
6. Builds on the dictionary attack by adding numbers and special characters and does some common substitution
hybrid
password types
password attacks
cognitive
7. Access control model designed to prevent authorized access to classified information - concerned with information confidentiality
detective
corrective
two factor
Bell La Padula
8. Access control model concerned with information integrity
Clark Wilson
password policy
Biba
one time
9. A password attack that uses a look up table containing pre-computed hashes
common locks
password types
rainbow table
Biba
10. Set of rules enforced by an OS to enhance security by forcing users to employ strong passwords
password policy
ACLs
mantrap
Biba
11. Token that generates a password based on time or event
cognitive
synchronous
password cracking
something you know
12. Error caused by biometrics where the system rejects authorized individuals - also know as false rejection rate (FRR)
objects
Biba
one time
type I
13. Error caused by biometrics where the system accepts impostors - also know as false acceptance rate (FAR)
objects
password cracking
Biba
type II
14. The process of recovering passwords from stored/transmitted data
physical access control issues
preventative
subjects
password cracking
15. ACL stands for...
hybrid
access control list
one time
Bell La Padula
16. Data can only be accessed through applications - designed to prevent unauthorized modification - errors and fraud
CER
type II
password attacks
Clark Wilson
17. Lists of permission associated with objects - used in the DAC model - typically include a implicit deny rule
rainbow table
detective
ACLs
something you know
18. Security controls that thwart a security breach - i.e. require user ID and password
preventative
brute force
have
access control models
19. Form of physical authentication - id/smart card - atm card - token - key - passport - something you __________
have
something you know
Biba
CER
20. Tailgating - piggybacking - social engineering
password cracking
one time
physical access control issues
Biba
21. Token that generates a password based on challenge/response
preventative
asynchronous
Biba
Clark Wilson
22. Authentication method that include pin - password - code words - personal information
objects
detective
something you know
corrective
23. Using three or more authentication methods
4 steps of access control
systems
multifactor
brute force
24. Data - hardware - networks - facility are access control ________
mantrap
objects
asynchronous
type II
25. CER stands for...
crossover error rate
mantrap
have
cognitive
26. Password type based on fact or opinion based information - best for authentication that users do not use often - easy to remember
are
detective
cognitive
implicit deny
27. Preset (key in knob) - deadbolt - combination padlock - cipher
Clark Wilson
something you know
synchronous
common locks
28. Password type that best defends against password attacks - i.e. tokens
one time
hybrid
subjects
Bell La Padula
29. Feature of an OS that allows for logical access control by grouping subjects with common characteristics
group policy
mantrap
preventative
subjects
30. Security controls that spot and capture details about a security breach - i.e. a log file
synchronous
detective
subjects
implicit deny
31. A password attack that encrypts all the words in the dictionary and compares the resulting hash values with those of the password
password types
common locks
dictionary
mantrap
32. User - programs - processes - requesting permissions are access control ________
rainbow table
subjects
brute force
Bell La Padula
33. Form of authentication that relies on human characteristic - fingerprint - hand geometry - facial recognition - eye scan - voice print - DNA - something you _________
objects
brute force
are
two factor
34. Dictionary - hybrid - brute force - rainbow table
password types
Bell La Padula
one time
password attacks
35. Information classification is no write up - no read down
CER
authentication methods
Biba
two factor
36. Used by most ACLs - also known as deny by default
Biba
implicit deny
CER
type II
37. Information classification is no read up - no write down
rainbow table
are
access control models
Bell La Padula
38. Password length/complexity help defend against this attack
password attacks
rainbow table
brute force
multifactor
39. Cognitive - dynamic - one-time - passphrase
password types
subjects
preventative
rainbow table
40. The most popular form of authentication
something you know
detective
mantrap
CER
41. A small room with two authentication doors - after gaining access to the 1st door the subject is locked in until access to granted to the 2nd door
mantrap
authentication methods
Bell La Padula
password cracking
42. Using any two authentication methods
multifactor
two factor
password policy
brute force
43. Something you know - have - are or location
password policy
authentication methods
are
Clark Wilson
44. A password attack that tries all possible combinations until the correct password is identified
brute force
Biba
physical access control issues
authentication methods
45. The point at which the false rejection rate equals the false acceptance rate - used to determine the accuracy of biometric systems - low value = high accuracy
CER
password policy
hybrid
brute force