Question 1

Select below the authentication system developed by the Massachusetts Institute of Technology (MIT) to verify the identity of network users:
A)Aurora
B)Kerberos
C)CHAP
D)TACACS

Accepted Answer

Kerberos is an authentication protocol developed by MIT, which verifies the identity of network users. The other options, Aurora, CHAP, and TACACS, are also authentication protocols, but they were not developed by MIT.

Question 2

Matching
-​Limitation imposed as to when a user can log in to a system or access resources.
A)Account expiration
B)Discretionary access control (DAC)
C)Extended TACACS (XTACACS)
D)Job rotation
E)LDAP injection attack
F)Least privilege
G)Mandatory access control (MAC)
H)Separation of duties
I)TACACS+
J)Time-of-day restriction

Accepted Answer

Time-of-day restriction is the limitation imposed as to when a user can log in to a system or access resources. This can be used to increase security by ensuring that only authorized users can access resources during specific times.

Question 3

Matching
-The act of moving individuals from one job responsibility to another.​
A)Account expiration
B)Discretionary access control (DAC)
C)Extended TACACS (XTACACS)
D)Job rotation
E)LDAP injection attack
F)Least privilege
G)Mandatory access control (MAC)
H)Separation of duties
I)TACACS+
J)Time-of-day restriction

Accepted Answer

Job rotation is the act of moving individuals from one job responsibility to another.

Note: The other choices are security concepts/technologies and do not relate to the definition given.

Question 4

The action that is taken by a subject over an object is called a(n):
A)authorization
B)access
C)control
D)operation

Accepted Answer

The action that is taken by a subject over an object is typically referred to as an operation. Authorization, access, and control all relate to the permissions and restrictions surrounding the operation, but they do not specifically refer to the action itself.

Question 5

During RADIUS authentication, what type of packet includes information such as identification of a specific AP that is sending the packet and the username and password?
A)accounting request
B)access request
C)verification request
D)authentication request

Accepted Answer

The answer of During RADIUS authentication, what type of packet...

Question 6

Matching
-​The practice of requiring that processes should be divided between two or more individuals.
A)Account expiration
B)Discretionary access control (DAC)
C)Extended TACACS (XTACACS)
D)Job rotation
E)LDAP injection attack
F)Least privilege
G)Mandatory access control (MAC)
H)Separation of duties
I)TACACS+
J)Time-of-day restriction

Accepted Answer

Separation of duties is the practice of requiring that processes should be divided between two or more individuals. This helps to ensure that no one person has too much control or influence over a process, which can help to prevent fraud, errors, and other security issues.

Question 7

In the DAC model, ____________________ can create and access their objects freely.

Accepted Answer

The answer of In the DAC model, ____________________ can create...

Question 8

To prevent one individual from having too much control, employees can ____________ job responsibilities within their home department or across positions in other departments.

Accepted Answer

The answer of To prevent one individual from having too...

Question 9

Matching
-An attack that constructs LDAP statements based on user input statements, allowing the attacker to retrieve information from the LDAP database or modify its content.​
A)Account expiration
B)Discretionary access control (DAC)
C)Extended TACACS (XTACACS)
D)Job rotation
E)LDAP injection attack
F)Least privilege
G)Mandatory access control (MAC)
H)Separation of duties
I)TACACS+
J)Time-of-day restriction

Accepted Answer

The given statement describes an LDAP injection attack, where the attacker constructs malicious LDAP statements using user input to retrieve or modify data in the LDAP database.

Note: The other options listed are security measures or access control methods that are not related to LDAP injection attacks.

Question 10

Matching
-The second version of the Terminal Access Control Access Control System (TACACS) authentication service.​
A)Account expiration
B)Discretionary access control (DAC)
C)Extended TACACS (XTACACS)
D)Job rotation
E)LDAP injection attack
F)Least privilege
G)Mandatory access control (MAC)
H)Separation of duties
I)TACACS+
J)Time-of-day restriction

Accepted Answer

Extended TACACS (XTACACS) is the second version of the Terminal Access Control Access Control System (TACACS) authentication service.

Question 11

A list that specifies which subjects are allowed to access an object and what operations they can perform on it is referred to as a(n):
A)ACE
B)DAC
C)entity
D)ACL

Accepted Answer

A list that specifies which subjects are allowed to access an object and what operations they can perform on it is referred to as an Access Control List (ACL). The other options (ACE, DAC, and entity) do not specifically refer to access control lists.

Question 12

Matching
-​The most restrictive access control model, typically found in military settings in which security is of supreme importance.
A)Account expiration
B)Discretionary access control (DAC)
C)Extended TACACS (XTACACS)
D)Job rotation
E)LDAP injection attack
F)Least privilege
G)Mandatory access control (MAC)
H)Separation of duties
I)TACACS+
J)Time-of-day restriction

Accepted Answer

Mandatory access control (MAC) is the most restrictive access control model. It is typically used in military settings where security is of utmost importance. In this model, access is granted by a central authority based on rules and policies that determine what actions a user can perform on an object.

Answer: F
 The principle of least privilege is a security concept that states a user should be given only the minimum level of access necessary to perform their job functions. This ensures that if the user account is compromised, the attacker will have limited access to sensitive systems and data.

Question 13

To assist with controlling orphaned and dormant accounts, what can be used to indicate when an account is no longer active?
A)Password expiration
B)Account expiration
C)Last login
D)Account last used

Accepted Answer

Account expiration can be used to indicate when an account is no longer active by setting a specific date after which the account will be disabled or deleted.

Question 14

Matching
-The current version of the Terminal Access Control Access Control System (TACACS) authentication service.​
A)Account expiration
B)Discretionary access control (DAC)
C)Extended TACACS (XTACACS)
D)Job rotation
E)LDAP injection attack
F)Least privilege
G)Mandatory access control (MAC)
H)Separation of duties
I)TACACS+
J)Time-of-day restriction

Accepted Answer

TACACS+ is the current version of the Terminal Access Control Access Control System (TACACS) authentication service.

Note: None of the other choices are related to TACACS or authentication services.

Question 15

The capability to look up information by name under the X.500 standard is known as a(n) ____________________-pages service.

Accepted Answer

The answer of The capability to look up information by...

Question 16

Matching
-Providing only the minimum amount of privileges necessary to perform a job or function.​
A)Account expiration
B)Discretionary access control (DAC)
C)Extended TACACS (XTACACS)
D)Job rotation
E)LDAP injection attack
F)Least privilege
G)Mandatory access control (MAC)
H)Separation of duties
I)TACACS+
J)Time-of-day restriction

Accepted Answer

Least privilege principle states that a user or process should only have the minimum amount of privileges required to perform its job or function.

Answer: B 
 Discretionary Access Control (DAC) restricts access to objects based on the identity of subjects and groups to which they belong. It allows the owner of an object to control who can access the object and in what ways.

Answer: G 
 Mandatory Access Control (MAC) restricts access to objects based on security labels assigned by a system administrator or security officer. It ensures that subjects can only access objects at or below their own security level.

Answer: H 
 Separation of duties ensures that no single person has complete control over a critical system function or transaction. It helps to prevent fraudulent or malicious acts by requiring multiple parties to be involved in key processes.

Question 17

____________________ is granting or denying approval to use specific resources.
​
a.​Account expiration
b.Discretionary access control (DAC)​
c.​Extended TACACS (XTACACS)
d.Job rotation​
e.​LDAP injection attack

Accepted Answer

The answer of ____________________ is granting or denying approval to...

Question 18

Matching
-​The process of setting a user's account to expire
A)Account expiration
B)Discretionary access control (DAC)
C)Extended TACACS (XTACACS)
D)Job rotation
E)LDAP injection attack
F)Least privilege
G)Mandatory access control (MAC)
H)Separation of duties
I)TACACS+
J)Time-of-day restriction

Accepted Answer

Account expiration refers to the process of setting a user's account to expire at a certain time or after a certain period. This is an important security measure that helps to ensure that old, unused accounts do not pose a risk to the system.

Answer: D
 Job rotation involves periodically moving employees to different roles within an organization. This can help to reduce the risk of fraud and other malicious activities, as employees are less likely to engage in unethical behavior if they know they will be regularly monitored and audited.

Answer: J
 Time-of-day restrictions are a type of access control that only allow users to access certain resources at certain times of the day. This can help to limit the risk of unauthorized access, and prevent users from accessing sensitive data during off-hours.

Question 19

A RADIUS ____________________ is a computer that forwards RADIUS messages among RADIUS clients and RADIUS servers.

Accepted Answer

The answer of A RADIUS ____________________ is a computer that...

Question 20

Matching
-The least restrictive access control model in which the owner of the object has total control over it.​
A)Account expiration
B)Discretionary access control (DAC)
C)Extended TACACS (XTACACS)
D)Job rotation
E)LDAP injection attack
F)Least privilege
G)Mandatory access control (MAC)
H)Separation of duties
I)TACACS+
J)Time-of-day restriction

Accepted Answer

Discretionary access control (DAC) is the least restrictive access control model in which the owner of the object has total control over it. This means that the owner can decide who can access the object and what level of access they have.

Quiz 11: Access Control Fundamentals

Select below the authentication system developed by the Massachusetts Institute of Technology (MIT) to verify the identity of network users:

Matching -Limitation imposed as to when a user can log in to a system or access resources.

Matching -The act of moving individuals from one job responsibility to another.

The action that is taken by a subject over an object is called a(n) :

During RADIUS authentication, what type of packet includes information such as identification of a specific AP that is sending the packet and the username and password?

Matching -The practice of requiring that processes should be divided between two or more individuals.

In the DAC model, ____________________ can create and access their objects freely.

To prevent one individual from having too much control, employees can ____________ job responsibilities within their home department or across positions in other departments.

Matching -An attack that constructs LDAP statements based on user input statements, allowing the attacker to retrieve information from the LDAP database or modify its content.

Matching -The second version of the Terminal Access Control Access Control System (TACACS) authentication service.

A list that specifies which subjects are allowed to access an object and what operations they can perform on it is referred to as a(n) :

Matching -The most restrictive access control model, typically found in military settings in which security is of supreme importance.

To assist with controlling orphaned and dormant accounts, what can be used to indicate when an account is no longer active?

Matching -The current version of the Terminal Access Control Access Control System (TACACS) authentication service.

The capability to look up information by name under the X.500 standard is known as a(n) ____________________-pages service.

Matching -Providing only the minimum amount of privileges necessary to perform a job or function.

____________________ is granting or denying approval to use specific resources. a.Account expiration b.Discretionary access control (DAC) c.Extended TACACS (XTACACS) d.Job rotation e.LDAP injection attack

Matching -The process of setting a user's account to expire

A RADIUS ____________________ is a computer that forwards RADIUS messages among RADIUS clients and RADIUS servers.

Matching -The least restrictive access control model in which the owner of the object has total control over it.

Quiz 11: Access Control Fundamentals

Select below the authentication system developed by the Massachusetts Institute of Technology (MIT) to verify the identity of network users:

Matching -​Limitation imposed as to when a user can log in to a system or access resources.

Matching -The act of moving individuals from one job responsibility to another.​

The action that is taken by a subject over an object is called a(n) :

During RADIUS authentication, what type of packet includes information such as identification of a specific AP that is sending the packet and the username and password?

Matching -​The practice of requiring that processes should be divided between two or more individuals.

In the DAC model, ____________________ can create and access their objects freely.

To prevent one individual from having too much control, employees can ____________ job responsibilities within their home department or across positions in other departments.

Matching -An attack that constructs LDAP statements based on user input statements, allowing the attacker to retrieve information from the LDAP database or modify its content.​

Matching -The second version of the Terminal Access Control Access Control System (TACACS) authentication service.​

A list that specifies which subjects are allowed to access an object and what operations they can perform on it is referred to as a(n) :

Matching -​The most restrictive access control model, typically found in military settings in which security is of supreme importance.

To assist with controlling orphaned and dormant accounts, what can be used to indicate when an account is no longer active?

Matching -The current version of the Terminal Access Control Access Control System (TACACS) authentication service.​

The capability to look up information by name under the X.500 standard is known as a(n) ____________________-pages service.

Matching -Providing only the minimum amount of privileges necessary to perform a job or function.​

____________________ is granting or denying approval to use specific resources. ​ a.​Account expiration b.Discretionary access control (DAC)​ c.​Extended TACACS (XTACACS) d.Job rotation​ e.​LDAP injection attack

Matching -​The process of setting a user's account to expire

A RADIUS ____________________ is a computer that forwards RADIUS messages among RADIUS clients and RADIUS servers.

Matching -The least restrictive access control model in which the owner of the object has total control over it.​

Matching -Limitation imposed as to when a user can log in to a system or access resources.

Matching -The act of moving individuals from one job responsibility to another.

Matching -The practice of requiring that processes should be divided between two or more individuals.

Matching -An attack that constructs LDAP statements based on user input statements, allowing the attacker to retrieve information from the LDAP database or modify its content.

Matching -The second version of the Terminal Access Control Access Control System (TACACS) authentication service.

Matching -The most restrictive access control model, typically found in military settings in which security is of supreme importance.

Matching -The current version of the Terminal Access Control Access Control System (TACACS) authentication service.

Matching -Providing only the minimum amount of privileges necessary to perform a job or function.

____________________ is granting or denying approval to use specific resources. a.Account expiration b.Discretionary access control (DAC) c.Extended TACACS (XTACACS) d.Job rotation e.LDAP injection attack

Matching -The process of setting a user's account to expire

Matching -The least restrictive access control model in which the owner of the object has total control over it.