Week 3

What is the difference between identification and authentication?

Which of the following is an example of biometric authentication?

What does multi-factor authentication rely on?

In terms of access controls, what does Single Sign-On (SSO) provide?

Which of the following is not an authentication standard mentioned in the text?

What is the main advantage of Single Sign-On (SSO) in identity management?

Which authentication weakness arises if an intruder compromises a password in a Single Sign-On (SSO) environment?

What technology is NOT typically used for centralized management of access controls?

Which of the following is not a common issue related to password management?

What is a potential drawback of Single Sign-On (SSO) implementation in practice?

Which authentication method relies on something the user has?

What type of assertion of identity is authentication?

Which factor of authentication does a token fall under?

What does multi-factor authentication typically combine?

Which standard is commonly associated with biometric authentication implementation?

What is a common weakness of traditional userid + password authentication?

Which of the following is an example of multi-factor authentication?

What makes biometric authentication stronger than traditional userid + password authentication?

Which type of authentication requires what the user knows and has?

What is the purpose of multi-factor authentication in defeating password guessing/cracking?

What is the purpose of hashing a user's password in the authentication process?

Why is it recommended to store user passwords encrypted or hashed in a system?

What security measure should be implemented for better protection against rainbow table attacks when storing passwords?

How does multi-factor authentication differ from traditional username and password authentication?

In which scenario would using biometric authentication be most appropriate?

What is the main weakness associated with Reduced Sign-On compared to Single Sign-On (SSO)?

Why is it recommended to combine Reduced Sign-On with two-factor authentication?

What is a common issue that arises when access rights are not properly managed during internal transfers?

Which of the following is a key step in the Access Requests and Provisioning process?

Why is two-factor authentication considered more secure than single-factor authentication?

Which type of attack method involves attempting to interfere with or gain control of a system using malicious code?

What process includes activities such as access requests, internal transfers, terminations, periodic reviews, and audits?

Which type of control aims to protect assets using various layers of security measures?

What kind of testing is used to evaluate access controls through the examination of system vulnerabilities?

Which method of attack aims to deceive individuals into disclosing sensitive information?

What principle advocates limiting user access rights to only what is essential for performing job functions?

Which type of control is used to identify and respond to security incidents after they have occurred?

What mechanism is employed to verify an individual's claimed identity using unique biological traits?

'Separation of duties' in access controls refers to:

Which type of authentication involves providing something you have (like an ID card) and something you know (like a password)?