Question 1

____________ is a centralized,automated approach to provide enterprise wide access to resources by employees and other authorized individuals.

Accepted Answer

The answer of ____________ is a centralized,automated approach to provide...

Question 2

There are four general means of authenticating a user's identity.They are: something the individual knows,something the individual possesses,something the individual is,and something the individual __________ .

Accepted Answer

The answer of There are four general means of authenticating...

Question 3

The principal underlying standard for federated identity is the __________ which defines the exchange of security information between online business partners.

Accepted Answer

SAML (Security Assertion Markup Language) is the principal underlying standard for federated identity. It defines the exchange of security information between online business partners, allowing users to access multiple applications and systems using a single set of credentials. OSAIS, RBAC, and SFIL are not directly related to federated identity.

Question 4

A Kerberos __________ is a set of managed nodes that share the same Kerberos database.

Accepted Answer

A Kerberos realm is a set of managed nodes that share the same Kerberos database, which contains user and service principal information. The realm is the administrative domain for Kerberos authentication and authorization. Therefore, Option A is the best choice for this question. Option B (TGS) refers to the Ticket Granting Service, which is a component of Kerberos that issues service tickets. Option C (network) is a broader term that does not specifically refer to Kerberos. Option D (principal) refers to an entity (user or service) that can be authenticated by Kerberos.

Question 5

__________ in Greek mythology is a three headed dog with a serpent's tail that guards the entrance of Hades.

Accepted Answer

The answer of __________ in Greek mythology is a three...

Question 6

The first published report on Kerberos listed the following requirements: secure,reliable,scalable and __________ .

Accepted Answer

The answer of The first published report on Kerberos listed...

Question 7

__________ is an extension of identity management to multiple security domains such as autonomous internal business units,external business partners and other third party applications and services with the goal of sharing digital identities so that a user can be authenticated a single time and then access applications and resources across multiple domains.

Accepted Answer

Identity federation is the extension of identity management to multiple security domains with the goal of sharing digital identities so that a user can be authenticated once and then access applications and resources across multiple domains. Kerberos is a network authentication protocol and not related to identity federation. Attribute service is a component of identity management but not specifically related to federation. Data security management is a broader topic that includes identity management but not specifically focused on federation.

Question 8

Presenting an identifier to the security system is the __________ step.

Accepted Answer

The answer of Presenting an identifier to the security system...

Question 9

Examples of something the individual possesses would include cryptographic keys,electronic keycards,smart cards,and physical keys.This type of authenticator is referred to as a __________ .

Accepted Answer

The answer of Examples of something the individual possesses would...

Question 10

The __________ is unsuitable for a connectionless type of application because it requires the overhead of a handshake before any connectionless transmission effectively negating the chief characteristic of a connectionless transaction.

Accepted Answer

The challenge-response approach involves a handshake where one party sends a challenge and the other party responds with a predetermined response. This approach is unsuitable for connectionless applications as it requires the overhead of a handshake before any data transfer can occur, which goes against the chief characteristic of a connectionless transaction. The other options do not involve a handshake and are not inherently unsuitable for a connectionless application.

Question 11

An authentication process consists of two steps: identification step and __________ step.

Accepted Answer

The answer of An authentication process consists of two steps:...

Question 12

_________ protocols enable communicating parties to satisfy themselves mutually about each other's identity and to exchange session keys.

Accepted Answer

The answer of _________ protocols enable communicating parties to satisfy...

Question 13

A __________ attack is where an opponent intercepts a message from the sender and replays it later when the timestamp in the message becomes current at the recipient's site.

Accepted Answer

The answer of A __________ attack is where an opponent...

Question 14

Presenting or generating authentication information that corroborates the binding between the entity and the identifier is the ___________ step.

Accepted Answer

Verification is the process of presenting or generating authentication information that corroborates the binding between the entity and the identifier.

Question 15

Kerberos relies exclusively on __________ .

Accepted Answer

Kerberos uses symmetric encryption for secure communication between clients and servers. This means that both the client and server use the same secret key to encrypt and decrypt messages, providing efficient and secure communication. Asymmetric encryption (choice B and D) and private key encryption (choice C) are not used exclusively in Kerberos.

Question 16

The _________ is responsible for generating keys to be used for a short time over a connection between two parties and for distributing those keys using the master keys to protect the distribution.

Accepted Answer

The answer of The _________ is responsible for generating keys...

Question 17

A centralized,automated approach to provide enterprise-wide access to resources by employees and other authorized individuals with a focus of defining an identity for each user,associating attributes with the identity,and enforcing a means by which a user can verify identity is __________ .

Accepted Answer

The description matches the definition of identity management, which involves creating and managing digital identities for users, specifying what resources each user can access, and enforcing authentication and authorization policies. A, C, and D are not appropriate choices as they do not fully capture the scope and purpose of the described approach.

Question 18

In an unprotected network environment any client can apply to any server for service.The obvious security risk of this is __________ .

Accepted Answer

In an unprotected network environment, any client can potentially impersonate another client or user and request services from a server. This is commonly known as impersonation or masquerading, and it poses a significant security risk. Without proper authentication and authorization mechanisms in place, it becomes difficult to verify the identity of the clients or to control access to sensitive resources on the server. Certification and authorization may also be important security considerations, but they are not directly related to the risk of impersonation in an unprotected network environment.

Question 19

To convince the server that a user is authentic,the authentication server creates a _________ that contains the user's ID and network address and the server's ID and sends it back to the client so they can continue the request for service.

Accepted Answer

The answer of To convince the server that a user...

Question 20

A service to solve the problem of minimizing the number of times that a user has to enter a password and the risk of an eavesdropper capturing the password and using it is known as the __________ .

Accepted Answer

The answer of A service to solve the problem of...

Quiz 15: User Authentication Protocols