SUBJECTS
|
BROWSE
|
CAREER CENTER
|
POPULAR
|
JOIN
|
LOGIN
Business Skills
|
Soft Skills
|
Basic Literacy
|
Certifications
About
|
Help
|
Privacy
|
Terms
|
Email
Search
Test your basic knowledge |
Comptia Security +: Network Access
Start Test
Study First
Subjects
:
certifications
,
comptia-security-+
,
it-skills
Instructions:
Answer 45 questions in 15 minutes.
If you are not ready to take this test, you can
study here
.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.
This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. The point at which the false rejection rate equals the false acceptance rate - used to determine the accuracy of biometric systems - low value = high accuracy
4 steps of access control
systems
CER
common locks
2. Data - hardware - networks - facility are access control ________
systems
objects
dictionary
one time
3. Access control model that does not allow data to be accessed directly - concerned with separation of duty or function
something you know
implicit deny
Clark Wilson
type I
4. The process of recovering passwords from stored/transmitted data
password cracking
Clark Wilson
Biba
rainbow table
5. A password attack that tries all possible combinations until the correct password is identified
something you know
brute force
cognitive
objects
6. Security controls that spot and capture details about a security breach - i.e. a log file
brute force
hybrid
group policy
detective
7. Information classification is no write up - no read down
Biba
subjects
access control list
one time
8. Procedures -processes - controls that determine access are access control ________
systems
password policy
type II
corrective
9. Password type based on fact or opinion based information - best for authentication that users do not use often - easy to remember
synchronous
cognitive
password attacks
CER
10. Access control model concerned with information integrity
are
Biba
subjects
multifactor
11. CER stands for...
two factor
crossover error rate
password types
are
12. Tailgating - piggybacking - social engineering
detective
type I
CER
physical access control issues
13. MAC - DAC - and RBAC
have
mantrap
access control models
password attacks
14. Lists of permission associated with objects - used in the DAC model - typically include a implicit deny rule
password cracking
ACLs
access control models
password attacks
15. The most popular form of authentication
password policy
rainbow table
Biba
something you know
16. Security controls that thwart a security breach - i.e. require user ID and password
password attacks
objects
preventative
Bell La Padula
17. Builds on the dictionary attack by adding numbers and special characters and does some common substitution
synchronous
dictionary
ACLs
hybrid
18. Using any two authentication methods
brute force
have
two factor
brute force
19. Information classification is no read up - no write down
cognitive
Bell La Padula
brute force
password cracking
20. Token that generates a password based on time or event
CER
synchronous
Clark Wilson
are
21. Error caused by biometrics where the system accepts impostors - also know as false acceptance rate (FAR)
multifactor
type II
password policy
access control list
22. Identification - authentication - authorization - accountability
4 steps of access control
subjects
Bell La Padula
type II
23. A password attack that uses a look up table containing pre-computed hashes
cognitive
common locks
rainbow table
password attacks
24. Form of physical authentication - id/smart card - atm card - token - key - passport - something you __________
password policy
have
4 steps of access control
mantrap
25. Set of rules enforced by an OS to enhance security by forcing users to employ strong passwords
password policy
Bell La Padula
one time
type II
26. Using three or more authentication methods
preventative
Bell La Padula
brute force
multifactor
27. Password length/complexity help defend against this attack
brute force
something you know
type II
detective
28. Error caused by biometrics where the system rejects authorized individuals - also know as false rejection rate (FRR)
multifactor
brute force
group policy
type I
29. Dictionary - hybrid - brute force - rainbow table
asynchronous
password attacks
password types
systems
30. Security controls that fix a problem or prevent further damage
corrective
password cracking
access control models
password types
31. Cognitive - dynamic - one-time - passphrase
password types
something you know
password attacks
corrective
32. Data can only be accessed through applications - designed to prevent unauthorized modification - errors and fraud
common locks
are
Clark Wilson
hybrid
33. Authentication method that include pin - password - code words - personal information
implicit deny
are
something you know
have
34. A small room with two authentication doors - after gaining access to the 1st door the subject is locked in until access to granted to the 2nd door
physical access control issues
mantrap
authentication methods
CER
35. Used by most ACLs - also known as deny by default
physical access control issues
objects
implicit deny
hybrid
36. A password attack that encrypts all the words in the dictionary and compares the resulting hash values with those of the password
two factor
dictionary
mantrap
Biba
37. Access control model designed to prevent authorized access to classified information - concerned with information confidentiality
systems
are
Bell La Padula
common locks
38. ACL stands for...
CER
access control list
rainbow table
4 steps of access control
39. Form of authentication that relies on human characteristic - fingerprint - hand geometry - facial recognition - eye scan - voice print - DNA - something you _________
common locks
are
have
implicit deny
40. User - programs - processes - requesting permissions are access control ________
something you know
subjects
hybrid
brute force
41. Feature of an OS that allows for logical access control by grouping subjects with common characteristics
brute force
Biba
group policy
type I
42. Something you know - have - are or location
authentication methods
password policy
corrective
one time
43. Token that generates a password based on challenge/response
type II
physical access control issues
group policy
asynchronous
44. Preset (key in knob) - deadbolt - combination padlock - cipher
common locks
access control list
subjects
password attacks
45. Password type that best defends against password attacks - i.e. tokens
access control list
one time
objects
detective