Question 1

Nedra is assigning permissions to groups of users on the network for a new cloud-based application that she has just installed. Which of the following do her actions specifically enable?
A) Identification
B) Federation
C) Authorization
D) Authentication

Accepted Answer

Assigning permissions to groups of users specifically enables authorization, as it determines what users can and cannot access within the system or application.

Question 2

Owen has been tasked with having multifactor authentication installed for entrances into the company's data center. Which of the following would meet that requirement?
A) Smart card and key fob
B) Retinal scan and handprint geometry scanner
C) Proximity badge reader and fingerprint scanner
D) Facial recognition and handprint geometry scanner

Accepted Answer

Multifactor authentication requires two or more different types of authentication factors. Option C uses something you have (proximity badge) and something you are (fingerprint), meeting the requirement.

Question 3

Steven has been tasked with planning the move from an infrastructure where administrators and users add permissions to resources individually to one where users are assigned to groups based upon the department they work in and what they do in the department and then assigning the groups to the resources. Which of the following has he been tasked with planning?
A) DAC
B) RBAC
C) MAC
D) JAC

Accepted Answer

Steven has been tasked with planning a Role-Based Access Control (RBAC) system. In RBAC, access to resources is based on the roles of individual users within an organization. Users are assigned to roles based on their responsibilities and qualifications, and these roles are then given permissions to access different resources. This approach simplifies the management of user permissions since permissions are managed at the role level rather than the individual level.

Question 4

Stan is walking past a row of cubicles when he notices someone's password written down on a sticky note that is attached to a monitor. The password is passwordpassword3. Besides the obvious problem of being the word password repeated followed by a single number, which of the following policies isn't in place that should be?
A) Expiration
B) Length
C) Re-use
D) Complexity

Accepted Answer

The password "passwordpassword3" lacks complexity, as it does not include a mix of uppercase letters, lowercase letters, numbers (beyond the single digit at the end), and special characters, which are typical requirements for a complex password. The length is sufficient, and without more information, we cannot determine the policies on expiration or re-use.

Question 5

Fictional Corp has a variety of applications deployed across multiple cloud service providers. Claude has been tasked with making sure that users aren't required to have separate accounts for each application. Which of the following should he look at using to meet that goal?
A) DRP
B) SSO
C) DNS
D) DHCP

Accepted Answer

Single Sign-On (SSO) allows users to log in once and gain access to multiple applications without being prompted to log in again at each of them. This would meet the goal of not requiring separate accounts for each application.

Question 6

Owen has just installed Linux as a virtual machine on the company's cloud service provider. He has configured the server to define a set of users to determine who has access to individual files and folders. Which of the following terms can describe the set of users?
A) ACL
B) XML
C) AAA
D) API

Accepted Answer

ACL (Access Control List) is the correct term as it is used to define a list of permissions attached to an object that specifies which users or system processes can access that object and what operations they can perform.

Question 7

Allen is visiting one of his client's data centers and, after signing in, is escorted through the premises the entire time. He notices that, in order to gain access to the data center, the employee had to swipe a proximity badge, key in a 6 digit code, and place his finger on a scanner. Which of the following describes the type of security that he just witnessed?
A) MFA
B) SFA
C) MTD
D) SLA

Accepted Answer

The security measures Allen observed involve multiple forms of authentication: something the employee has (a proximity badge), something the employee knows (a 6-digit code), and something the employee is (biometric verification via a fingerprint scanner). This combination of different authentication factors is known as Multi-Factor Authentication (MFA).

Question 8

Andrew manages a variety of applications spread out between multiple cloud providers. Users can sign into any of the cloud applications with the same username and password. Which of the following has been implemented?
A) ITIL
B) OSPF
C) PKI
D) Federation

Accepted Answer

Federation allows users to access multiple applications across different cloud providers using the same credentials, providing a seamless sign-in experience. This is achieved through trust relationships between the service providers, enabling the sharing of identity information.

Question 9

James works for a company where administrators and users add individual granular permissions to various resources. Which of the following describes the access control methods used by this company?
A) DAC
B) RBAC
C) MAC
D) GAC

Accepted Answer

DAC, or Discretionary Access Control, allows users and administrators to set access permissions on resources, reflecting the scenario described.

Question 10

Sarah has deployed a private cloud infrastructure that requires users to insert a smart card into their computer or into a card reader in order to authenticate them to use the applications. The smart card is associated with a certificate for each user, which is verified against a certificate authority. Which of the following has she deployed?
A) PCI DSS
B) PII
C) PKI
D) PSK

Accepted Answer

Sarah has deployed a Public Key Infrastructure (PKI), which uses certificates associated with smart cards for authentication. PKI involves the use of a certificate authority to issue and verify certificates, ensuring secure user authentication in her private cloud infrastructure.

Question 11

Fictional Corp uses a cloud service provider that provides a framework of techniques and tools for managing the identities of people and applications that allow for access to cloud resources. Which of the following describe this framework?
A) MAC
B) IAM
C) DRM
D) IRM

Accepted Answer

IAM (Identity and Access Management) is the framework that provides techniques and tools for managing the identities of people and applications, ensuring secure access to cloud resources.

Question 12

Mark manages a custom application that resides on a cloud service provider that relies on users to authenticate by means of entering a username and password. Which of the following factors of authentication does this application use?
A) Something you have
B) Something you are
C) Something you know
D) Something you do

Accepted Answer

The application uses a knowledge factor for authentication, which is something the user knows, such as a password.

Question 13

Fictional Corp has assigned each user within their Active Directory implementation a username. This username is a form of:
A) accounting
B) authentication
C) authorization
D) identity

Accepted Answer

Usernames serve as a form of identity within systems, distinguishing one user from another.

Question 14

Fictional Corp is trying out a new experimental technology that analyzes how users type as part of a multifactor authentication implementation. Which of the following categories of authentication factors would this fall into?
A) Something you know
B) Something you are
C) Something you do
D) Something you have

Accepted Answer

Analyzing how users type is considered a behavioral biometric, which falls under the category of "something you do." This category includes any action or behavior that can uniquely identify an individual, such as typing patterns, gait, or how one interacts with devices.

Question 15

Cherise has been tasked with increasing the security for the company's data center. Currently there is a proximity badge reader on the door. She is considering adding an iris camera to the door. Once it is in place, which of the following factors will be used for authentication into the data center? (Choose all that apply.)
A) Something that you do
B) Something that you know
C) Something that you are
D) Something that you have

Accepted Answer

The answer of Cherise has been tasked with increasing the...

Question 16

Noah has gone to work for the government and sees that some systems use a method of labeling data as classified, secret, and top secret rather than creating groups of users and applying permissions for those groups. Which of the following describes these systems of labeling data?
A) DAC
B) RBAC
C) MAC
D) TAC

Accepted Answer

MAC, or Mandatory Access Control, is a model that labels data and resources with varying levels of security (such as classified, secret, and top secret) and grants access based on those labels rather than grouping users and assigning permissions. This approach is commonly used in government and military systems to ensure that only authorized users can access information at their clearance level or below.

Question 17

Judy's company is implementing a new authentication technology that requires assigning certificates to users and issuing smart cards. Which of the following does she need to install and configure to manage the certificates?
A) RA
B) CRT
C) CA
D) CRL

Accepted Answer

CA (Certificate Authority) is responsible for issuing, managing, and validating certificates, which is necessary for the scenario described.

Question 18

Emily is analyzing the logs for one of the servers in her organization. She sees three failed attempts to log in with an incorrect password. She then sees continued attempts to log in with a different error message. Which of the following could be the reason the error message changed?
A) The server was compromised after the third failed password attempt.
B) The server's time was changed so the authentication attempts failed because of a different reason.
C) The account is now locked after 3 failed attempts, so the error message has most likely changed from a failed password to one reflecting a locked account.
D) The server configuration has changed.

Accepted Answer

The change in error message after multiple failed login attempts is commonly due to account lockout policies. After a specified number of failed attempts (in this case, three), the account is locked to prevent unauthorized access, changing the error message from one indicating a wrong password to one indicating the account is locked.

Question 19

Sebastian is trying to access a resource that has been labeled as top secret, but he only has secret clearance. Which of the following access control methods does his organization use?
A) Role-based access control
B) Mandatory access control
C) Discretionary access control
D) Classification-based access control

Accepted Answer

Mandatory access control (MAC) is a model that uses predefined security labels (e.g., top secret, secret) to determine access rights. The system enforces access policies based on these labels, not allowing users to access information unless their clearance level matches or exceeds the required level for the resource. Since Sebastian cannot access a top secret resource with only a secret clearance, this scenario exemplifies mandatory access control.

Question 20

Lincoln is assigning permissions to users and groups for a new application that he is deploying. As he's doing this, which of the following principles should he make sure he follows?
A) Minimal overhead
B) Least privilege
C) Minimum access
D) Least permissions

Accepted Answer

The principle of least privilege is a security concept that entails giving users only the permissions they need to perform their tasks, and no more. This minimizes potential damage from accidents or attacks by limiting access rights for users to the bare minimum necessary to complete their job.

Quiz 7: Identity and Access Management

Nedra is assigning permissions to groups of users on the network for a new cloud-based application that she has just installed. Which of the following do her actions specifically enable?

Owen has been tasked with having multifactor authentication installed for entrances into the company's data center. Which of the following would meet that requirement?

Fictional Corp has a variety of applications deployed across multiple cloud service providers. Claude has been tasked with making sure that users aren't required to have separate accounts for each application. Which of the following should he look at using to meet that goal?

Owen has just installed Linux as a virtual machine on the company's cloud service provider. He has configured the server to define a set of users to determine who has access to individual files and folders. Which of the following terms can describe the set of users?

Andrew manages a variety of applications spread out between multiple cloud providers. Users can sign into any of the cloud applications with the same username and password. Which of the following has been implemented?

James works for a company where administrators and users add individual granular permissions to various resources. Which of the following describes the access control methods used by this company?

Fictional Corp uses a cloud service provider that provides a framework of techniques and tools for managing the identities of people and applications that allow for access to cloud resources. Which of the following describe this framework?

Mark manages a custom application that resides on a cloud service provider that relies on users to authenticate by means of entering a username and password. Which of the following factors of authentication does this application use?

Fictional Corp has assigned each user within their Active Directory implementation a username. This username is a form of:

Fictional Corp is trying out a new experimental technology that analyzes how users type as part of a multifactor authentication implementation. Which of the following categories of authentication factors would this fall into?

Noah has gone to work for the government and sees that some systems use a method of labeling data as classified, secret, and top secret rather than creating groups of users and applying permissions for those groups. Which of the following describes these systems of labeling data?

Judy's company is implementing a new authentication technology that requires assigning certificates to users and issuing smart cards. Which of the following does she need to install and configure to manage the certificates?

Emily is analyzing the logs for one of the servers in her organization. She sees three failed attempts to log in with an incorrect password. She then sees continued attempts to log in with a different error message. Which of the following could be the reason the error message changed?

Sebastian is trying to access a resource that has been labeled as top secret, but he only has secret clearance. Which of the following access control methods does his organization use?

Lincoln is assigning permissions to users and groups for a new application that he is deploying. As he's doing this, which of the following principles should he make sure he follows?