Test your basic knowledge |

Comptia Security +: Network Access

Instructions:
  • Answer 45 questions in 15 minutes.
  • If you are not ready to take this test, you can study here.
  • Match each statement with the correct term.
  • Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. Error caused by biometrics where the system rejects authorized individuals - also know as false rejection rate (FRR)






2. A password attack that tries all possible combinations until the correct password is identified






3. Password length/complexity help defend against this attack






4. Error caused by biometrics where the system accepts impostors - also know as false acceptance rate (FAR)






5. Feature of an OS that allows for logical access control by grouping subjects with common characteristics






6. Data - hardware - networks - facility are access control ________






7. Dictionary - hybrid - brute force - rainbow table






8. Data can only be accessed through applications - designed to prevent unauthorized modification - errors and fraud






9. Form of physical authentication - id/smart card - atm card - token - key - passport - something you __________






10. Security controls that thwart a security breach - i.e. require user ID and password






11. Used by most ACLs - also known as deny by default






12. Security controls that spot and capture details about a security breach - i.e. a log file






13. Using three or more authentication methods






14. Access control model designed to prevent authorized access to classified information - concerned with information confidentiality






15. Authentication method that include pin - password - code words - personal information






16. A password attack that uses a look up table containing pre-computed hashes






17. Builds on the dictionary attack by adding numbers and special characters and does some common substitution






18. Token that generates a password based on challenge/response






19. Password type based on fact or opinion based information - best for authentication that users do not use often - easy to remember






20. User - programs - processes - requesting permissions are access control ________






21. Using any two authentication methods






22. Password type that best defends against password attacks - i.e. tokens






23. Access control model concerned with information integrity






24. CER stands for...






25. Information classification is no read up - no write down






26. ACL stands for...






27. A small room with two authentication doors - after gaining access to the 1st door the subject is locked in until access to granted to the 2nd door






28. Preset (key in knob) - deadbolt - combination padlock - cipher






29. The most popular form of authentication






30. Identification - authentication - authorization - accountability






31. Form of authentication that relies on human characteristic - fingerprint - hand geometry - facial recognition - eye scan - voice print - DNA - something you _________






32. Access control model that does not allow data to be accessed directly - concerned with separation of duty or function






33. MAC - DAC - and RBAC






34. Procedures -processes - controls that determine access are access control ________






35. Information classification is no write up - no read down






36. Set of rules enforced by an OS to enhance security by forcing users to employ strong passwords






37. Security controls that fix a problem or prevent further damage






38. Tailgating - piggybacking - social engineering






39. Cognitive - dynamic - one-time - passphrase






40. Lists of permission associated with objects - used in the DAC model - typically include a implicit deny rule






41. Something you know - have - are or location






42. Token that generates a password based on time or event






43. The process of recovering passwords from stored/transmitted data






44. The point at which the false rejection rate equals the false acceptance rate - used to determine the accuracy of biometric systems - low value = high accuracy






45. A password attack that encrypts all the words in the dictionary and compares the resulting hash values with those of the password