Deck 2: Access Control

Question 1

A deny-by-default stance is less strict than an allow-by-default stance.

Answer 1

False

Question 2

Knowledge factor authentication is also referred to as Type I authentication factor.

Answer 2

True

Question 3

Passwords are considered weaker than passphrases.

Answer 3

True

Question 4

Smart cards are less expensive to implement than memory cards.

Question 5

Retina scans have a higher accuracy than any other biometric scan.

Question 6

Type I errors are more dangerous than Type II errors.

Question 7

When considering FAR, FRR, and CER, smaller values are better.

Question 8

Content-dependent access control is based on subject or object attributes or environmental characteristics.

Question 9

A network-based IDS is the most common IDS and monitors network traffic on a local network segment.

Question 10

Pharming and phishing are password attacks.

Question 11

Which concept ensures that data is protected from unauthorized modification or data corruption?

A) Confidentiality
B) Integrity
C) Availability
D) Identification

Question 12

Which of the following is an example of three-factor authentication?

A) Username, password, smart card
B) Password, smart card, PIN
C) Password, smart card, iris scan
D) Smart card, iris scan, keystroke dynamics

Question 13

Of the options given, which biometric consideration is MOST important?

A) FAR
B) Enrollment time
C) Throughput rate
D) FRR

Question 14

What defines the method for identifying and authenticating users and the level of access that is granted to users?

A) Least privilege
B) Dual controls
C) Separation of duties
D) Access control policy

Question 15

Which accountability mechanism reviews facility and perimeter protections?

A) Physical vulnerability assessment
B) Personnel vulnerability assessment
C) Clipping level
D) Blind test

Question 16

In which access control category do fire extinguishers fall?

A) Detective
B) Corrective
C) Preventive
D) Compensative

Question 17

Which of the following are physical access controls?

A) Security policies
B) Baselines
C) Badges
D) Audit trails

Question 18

In which access control model is all that is not expressly permitted is forbidden?

A) MAC
B) RBAC
C) Rule-based access control
D) DAC

Question 19

Which type of IDS analyzes traffic and compares it to normal traffic to determine whether said traffic is a threat?

A) Anomaly-based
B) Signature-based
C) Rule-based
D) Pattern-matching

Question 20

Which malicious software collects private user data?

A) Virus
B) Spyware
C) Worm
D) Trojan horse