Help
Options
Didn't know it?
click below
click below
Knew it?
click below
click below
Don't Know
Remaining cards (0)
Know
retry
shuffle
restart
0:00
Embed Code - If you would like this activity on your web page, copy the script below and paste it into your web page.
Normal Size Small Size show me how
Normal Size Small Size show me how
Module 4 quiz
| Term | Definition |
|---|---|
| Which authentication factor is represented by a password? | Something you know |
| What is the primary purpose of a password manager? | To generate and securely store passwords in a protected vault |
| Which of the following is an example of multifactor authentication? | Password and security key |
| What does FAR (False Acceptance Rate) measure in a biometric system? | The rate at which unauthorized users are accepted |
| Which authentication token type generates a password that can only be used once? | OTP |
| What is the principle of least privilege? | Users should receive the minimum permissions necessary to perform their job |
| Geolocation | Determines a user's physical location |
| Passwordless Authentication | authentication without a password using an authenticatior |
| FRR | False rejection rate |
| Deprovisioning | the systematic process of removing, revoking, or disabling a user's access rights, accounts, and permissions to IT systems and software |
| Describe the enrollment process used in biometric authentication | the initial process where a system captures and records a user's unique physical or behavioral traits, such as fingerprints, facial features, or voice patterns |
| Explain one advantage and one potential risk of using a password manager | one advantage is not having to remember all of your passwords one risk is the password manager becoming compromised |
| What is the difference between a hard authentication token and a soft authentication token? | hard token= hardware device- physical soft token= software application- not physical |
| An employee logs in from New York. Two hours later, a login attempt is detected from Los Angeles using the same account.What type of account restriction policy would detect this situation? Why might the organization block the second login attempt? | Account lockout policies B) Because its a different location and ip address than the first login |
| What is an authentication provider? | The software architecture and code that authenticates users before starting a shell |
| Why are plaintext passwords usually not stored in credential databases? | They increase the risk of compromise |
| In Windows local sign-in, which service compares submitted credentials to stored hashes? | LSASS |
| Which database stores password hashes for local Windows accounts? | SAM |
| What is the preferred authentication protocol for Windows network sign-in? | Kerberos |
| Which file stores local Linux user account names? | /etc/passwd/ |
| What Linux technology allows different authentication providers to be used? | PAM |
| Which protocol is commonly used for interactive login over a network in Linux? | SSH |
| Directory Service | A database that stores information about users, computers, groups, and services |
| LDAP | A protocol developed from the X.500 standard and used by most directory services |
| Distinguished Name (DN) | A unique identifier made up of attribute-value pairs |
| Single Sign-On (SSO) | A system that allows a user to authenticate once and access integrated services without re-entering credentials |
| Kerberos | A network authentication and authorization protocol that uses tickets |
| Ticket Granting Ticket (TGT) | A logical token that confirms a user has been authenticated |
| Explain the difference between a password and a password hash. | A password is the information entered by the user, while a password hash is a cryptographic representation of that password used for storage and comparison |
| What are three types of objects that can be stored in a directory service? | users, computers, security groups/roles, services. |
| List two common attributes that may appear in a distinguished name (DN) | CN, OU, O, C, DC |
| What is the purpose of the Key Distribution Center (KDC) in Kerberos? | The KDC acts as an intermediary that provides authentication and ticket-granting services for Kerberos. |
| A company wants employees to log in once and automatically access multiple application servers without repeatedly entering credentials. Which authentication solution from this lesson would best meet that need? Explain why. | Single Sign-On (SSO) using Kerberos because users authenticate once and receive tickets that allow access to integrated services without re-entering credentials |
| A Linux administrator wants users to authenticate with smart cards instead of traditional passwords. Which technology discussed in the lesson could help enable this, and why? | Pluggable Authentication Modules (PAMs) because PAM can enable different authentication providers, including smart-card logins. |
| Multifactor authentication (MFA) | Something you KNOW and something you HAVE • NOT something you KNOW and something else you KNOW |
| Something you have | Ownership factor: hardware tokens and fobs |
| Something you are/do | Biometric factor: fingerprint and facial scans |
| Somewhere you are | GeolocaƟon via locaƟon services • IP/network location |
| Failure to Enroll Rate (FER) | are incidents in which a template cannot be created and matched for a user during enrollment. |
| Token generation types | Certificate-based (requires PKI), One-time password (OTP), Fast Identity Online (FIDO) Universal 2nd Factor (U2F) |
| Authenticator form factors | Smart card, One-Ɵme password (OTP) fob, Security key, Activation method to show presence |
| DiscreƟonary Access Control (DAC) | Based on resource ownership, Access Control Lists (ACLs), Vulnerable to compromised privileged user accounts |
| Mandatory Access Control (MAC) | Labels and clearance, System policies to restrict access |
| Access control model | determines how users receive permissions/rights |
Created by:
OliviaGarcia2412