Week 3

Play an AI-generated podcast conversation about this lesson

What is the difference between identification and authentication?

Identification verifies the user's identity, while authentication provides a proven assertion of identity. (correct)

Identification and authentication are the same concepts.

Identification checks the credentials, while authentication relies on biometric factors.

Identification provides a proven assertion of identity, while authentication verifies the user's identity.

Which of the following is an example of biometric authentication?

Fingerprint scan (correct)

Knowledge-based questions

Username and password combination

Possession of an access card

What does multi-factor authentication rely on?

At least two factors: knowledge-based, possession-based, or entity-based (correct)

At least three factors: possession-based, entity-based, and biometric

Single factor only

Biometric factor only

In terms of access controls, what does Single Sign-On (SSO) provide?

Centralized identity for multiple applications with session management Signup and view all the answers

Which of the following is not an authentication standard mentioned in the text?

IMAP Signup and view all the answers

What is the main advantage of Single Sign-On (SSO) in identity management?

Allows authentication once to access multiple systems Signup and view all the answers

Which authentication weakness arises if an intruder compromises a password in a Single Sign-On (SSO) environment?

Access to all participating systems Signup and view all the answers

What technology is NOT typically used for centralized management of access controls?

Two-factor authentication Signup and view all the answers

Which of the following is not a common issue related to password management?

Single Sign-On integration Signup and view all the answers

What is a potential drawback of Single Sign-On (SSO) implementation in practice?

It may be harder to achieve in practice due to integration issues Signup and view all the answers

Which authentication method relies on something the user has?

Fingerprint Signup and view all the answers

What type of assertion of identity is authentication?

Proven assertion Signup and view all the answers

Which factor of authentication does a token fall under?

Something the user has Signup and view all the answers

What does multi-factor authentication typically combine?

Various types of authentication factors Signup and view all the answers

Which standard is commonly associated with biometric authentication implementation?

Biometric Identification Protocol Signup and view all the answers

What is a common weakness of traditional userid + password authentication?

Easily guessed passwords Signup and view all the answers

Which of the following is an example of multi-factor authentication?

Iris scan Signup and view all the answers

What makes biometric authentication stronger than traditional userid + password authentication?

Measures a part of user's body Signup and view all the answers

Which type of authentication requires what the user knows and has?

Token-based authentication Signup and view all the answers

What is the purpose of multi-factor authentication in defeating password guessing/cracking?

To ensure the user has a second factor besides a password Signup and view all the answers

What is the purpose of hashing a user's password in the authentication process?

To compare the hash with the stored hash for user authentication Signup and view all the answers

Why is it recommended to store user passwords encrypted or hashed in a system?

To prevent unauthorized access to user passwords Signup and view all the answers

What security measure should be implemented for better protection against rainbow table attacks when storing passwords?

Using 'salting' in password hashing Signup and view all the answers

How does multi-factor authentication differ from traditional username and password authentication?

Multi-factor authentication requires multiple forms of verification Signup and view all the answers

In which scenario would using biometric authentication be most appropriate?

High-security facilities where physical access is restricted Signup and view all the answers

What is the main weakness associated with Reduced Sign-On compared to Single Sign-On (SSO)?

No inter-system session management Signup and view all the answers

Why is it recommended to combine Reduced Sign-On with two-factor authentication?

To enhance security by adding an extra layer beyond passwords Signup and view all the answers

What is a common issue that arises when access rights are not properly managed during internal transfers?

Accumulation of privileges Signup and view all the answers

Which of the following is a key step in the Access Requests and Provisioning process?

Conducting a periodic access review Signup and view all the answers

Why is two-factor authentication considered more secure than single-factor authentication?

It combines two different forms of identification Signup and view all the answers

Which type of attack method involves attempting to interfere with or gain control of a system using malicious code?

Buffer overflow Signup and view all the answers

What process includes activities such as access requests, internal transfers, terminations, periodic reviews, and audits?

Access management Signup and view all the answers

Which type of control aims to protect assets using various layers of security measures?

Defense in depth control Signup and view all the answers

What kind of testing is used to evaluate access controls through the examination of system vulnerabilities?

Application vulnerability testing Signup and view all the answers

Which method of attack aims to deceive individuals into disclosing sensitive information?

Phishing Signup and view all the answers

What principle advocates limiting user access rights to only what is essential for performing job functions?

Least privilege Signup and view all the answers

Which type of control is used to identify and respond to security incidents after they have occurred?

Corrective control Signup and view all the answers

What mechanism is employed to verify an individual's claimed identity using unique biological traits?

Biometric authentication Signup and view all the answers

'Separation of duties' in access controls refers to:

Dividing tasks between different employees Signup and view all the answers

Which type of authentication involves providing something you have (like an ID card) and something you know (like a password)?

Multi-factor authentication Signup and view all the answers