stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
4.6 quiz Sec+ 701 Flashcards | StudBud
Explore
/
4.6 quiz Sec+ 701
4.6 quiz Sec+ 701
26 terms
·
StudBud Administration
·
445 plays
Imported from external platform
Flashcards
26 cards
F
Practice quiz
P
Host live
L
Questions
26
Answers
1
In order to have a secure password it must have length, complexity, restricted reuse, expiration date, and age
False
True
2
A bank asks to provide ID, passport, birth certificate, government issued ID, they are
get to know you personally
see if you are famous
place the name with the face
identity proofing
3
What are the 3 MFA factors?
password, pin, fingerprint
something you have, something you are, somewhere you are
something you know, something you wear, something you remember
password, something you know, something you have
4
James created one password and PIN as MFA, he implemented something you are factor
True
False
5
James (same guy) used his credit card and PIN at an ATM to withdraw cash. James implemented 2FA
True
False
6
Provisioning and deprovisioning is part of
penetration testing methodologies
risk tolerance
cyber insurance
on/off boarding process
7
LDAP used to
disable and block viruses
enforce authorization of users
enable physical access to an organization
enable users find data, persons in the directory, and authenticate them
8
It is always the BEST choice when least privilege is implemented as a security access control
False
True
9
Using alternative means, such as, biometrics instead of password to access your account is called
passwordness
passwordless
2FA
MFA
10
PAM handles
non-privileged account
administrative and privileged accounts
access of regular accounts
detection of users
11
MAC is based on labels and their classification levels
True
False
12
Password managers are used to
share them
tell users when to use a password
remind users they have passwords
store and manage all your passwords
13
A user took a new role; the access was left open after the role ended... what is this called
mutual creep
vertical creep
privilege creep
horizontal creep
14
Receiver operating characteristic are tool used to measure how accurate biometric devices work
False
True
15
Temporary accounts with limited lifespan such as, guest accounts are called:
visitor accounts
ephemeral credentials
urgent accounts
least privileged account
16
Number of successful authentications for invalid subjects is called
FRR
ROC
FAR
CER
17
The concept of using one user ID and password for multiple domains and across one network is called
proofing
validation
authentication
federation
18
Security keys are physical devices used for
AUTHENTICATON, AUTHORIZATION and access control
False
True
19
SAML supports exchanging authentication and authorization details between systems, services, and devices
False
True
20
Physical tokens that generate numbers and numbers sent to your smart phone via SMS referred to as
ephemeral authenticaton tokens
RBAC
Hard and soft authentication tokens
mutual authentication tokens
21
Cybersecurity discipline that deals with how users access digital resources and what they can do with those resources
IAM
DAC
MAC
RBAC
22
You want to limit access to the internet for your three younger siblings and manage them as a group, what would you use
DAC
IAM
RBAC
MAC
23
To ensure better account security after creating password, it is better to implement
IAM
RBAC
MFA
DAC
24
Number of failed authentications for valid subjects is called
FAR
FRR
ROC
CER
25
Implementations of SSO are (two answers)
IAM
OAuth
RBAC
OpenID
26
What form of access control policy is implemented when filtering traffic, firewalls, and routers
Discretionary access control
Rule-based access control
Mandatory access control
Role-based access control