SUBJECTS
|
BROWSE
|
CAREER CENTER
|
POPULAR
|
JOIN
|
LOGIN
Business Skills
|
Soft Skills
|
Basic Literacy
|
Certifications
About
|
Help
|
Privacy
|
Terms
|
Email
Search
Test your basic knowledge |
Comptia Security +: Network Access
Start Test
Study First
Subjects
:
certifications
,
comptia-security-+
,
it-skills
Instructions:
Answer 45 questions in 15 minutes.
If you are not ready to take this test, you can
study here
.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.
This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. Data can only be accessed through applications - designed to prevent unauthorized modification - errors and fraud
Clark Wilson
subjects
mantrap
rainbow table
2. Preset (key in knob) - deadbolt - combination padlock - cipher
objects
common locks
Bell La Padula
dictionary
3. Password type based on fact or opinion based information - best for authentication that users do not use often - easy to remember
password attacks
cognitive
CER
hybrid
4. Something you know - have - are or location
authentication methods
password attacks
access control models
synchronous
5. Information classification is no read up - no write down
cognitive
type I
something you know
Bell La Padula
6. MAC - DAC - and RBAC
one time
access control models
password attacks
brute force
7. Used by most ACLs - also known as deny by default
asynchronous
password policy
Biba
implicit deny
8. Tailgating - piggybacking - social engineering
Bell La Padula
brute force
physical access control issues
two factor
9. ACL stands for...
CER
access control list
password cracking
4 steps of access control
10. Security controls that fix a problem or prevent further damage
corrective
group policy
authentication methods
brute force
11. Error caused by biometrics where the system accepts impostors - also know as false acceptance rate (FAR)
dictionary
ACLs
type II
have
12. Error caused by biometrics where the system rejects authorized individuals - also know as false rejection rate (FRR)
type I
something you know
authentication methods
Biba
13. Information classification is no write up - no read down
authentication methods
4 steps of access control
Biba
password types
14. Access control model designed to prevent authorized access to classified information - concerned with information confidentiality
hybrid
Bell La Padula
4 steps of access control
are
15. Lists of permission associated with objects - used in the DAC model - typically include a implicit deny rule
Clark Wilson
rainbow table
ACLs
have
16. Token that generates a password based on challenge/response
asynchronous
Biba
implicit deny
password cracking
17. CER stands for...
crossover error rate
subjects
Bell La Padula
Clark Wilson
18. Using any two authentication methods
two factor
Biba
cognitive
mantrap
19. Procedures -processes - controls that determine access are access control ________
physical access control issues
systems
preventative
Biba
20. Data - hardware - networks - facility are access control ________
synchronous
group policy
password types
objects
21. Security controls that thwart a security breach - i.e. require user ID and password
corrective
CER
preventative
objects
22. Builds on the dictionary attack by adding numbers and special characters and does some common substitution
Bell La Padula
have
detective
hybrid
23. Cognitive - dynamic - one-time - passphrase
password attacks
password types
brute force
Bell La Padula
24. Access control model concerned with information integrity
subjects
Biba
ACLs
mantrap
25. A password attack that encrypts all the words in the dictionary and compares the resulting hash values with those of the password
dictionary
Clark Wilson
subjects
cognitive
26. Form of physical authentication - id/smart card - atm card - token - key - passport - something you __________
two factor
have
Biba
multifactor
27. A small room with two authentication doors - after gaining access to the 1st door the subject is locked in until access to granted to the 2nd door
hybrid
mantrap
brute force
one time
28. Password length/complexity help defend against this attack
brute force
something you know
rainbow table
physical access control issues
29. Set of rules enforced by an OS to enhance security by forcing users to employ strong passwords
common locks
Bell La Padula
password policy
CER
30. Access control model that does not allow data to be accessed directly - concerned with separation of duty or function
Clark Wilson
Bell La Padula
subjects
one time
31. Authentication method that include pin - password - code words - personal information
something you know
hybrid
brute force
crossover error rate
32. The most popular form of authentication
CER
something you know
type I
access control list
33. A password attack that tries all possible combinations until the correct password is identified
password types
brute force
objects
subjects
34. Identification - authentication - authorization - accountability
dictionary
subjects
4 steps of access control
implicit deny
35. Password type that best defends against password attacks - i.e. tokens
something you know
detective
one time
objects
36. The process of recovering passwords from stored/transmitted data
crossover error rate
password cracking
type II
preventative
37. The point at which the false rejection rate equals the false acceptance rate - used to determine the accuracy of biometric systems - low value = high accuracy
are
CER
crossover error rate
group policy
38. Security controls that spot and capture details about a security breach - i.e. a log file
access control list
detective
authentication methods
crossover error rate
39. Feature of an OS that allows for logical access control by grouping subjects with common characteristics
corrective
ACLs
hybrid
group policy
40. A password attack that uses a look up table containing pre-computed hashes
Biba
type II
are
rainbow table
41. User - programs - processes - requesting permissions are access control ________
Clark Wilson
Bell La Padula
subjects
4 steps of access control
42. Token that generates a password based on time or event
authentication methods
synchronous
subjects
access control models
43. Form of authentication that relies on human characteristic - fingerprint - hand geometry - facial recognition - eye scan - voice print - DNA - something you _________
password policy
crossover error rate
one time
are
44. Dictionary - hybrid - brute force - rainbow table
physical access control issues
authentication methods
access control list
password attacks
45. Using three or more authentication methods
corrective
password types
password cracking
multifactor