AAA Security (Not Roadside Assistance)

Question 1

Authentication is concerned with determining _______.

• Eligibility
• Identity
• Validity
• Access

Question 2

Which of the following are valid multi-factor authentication factors? Check all that apply.

• Something you know
• Something you did
• Something you have
• Something you are

Question 3

Security Keys utilize a secure challenge-and-response authentication system, which is based on ________.

• Symmetric encryption
• Public key cryptography
• Shared secrets
• Steganography

Question 4

Kerberos uses _____ as authentication tokens.

• Tickets
• Cryptographic keys
• Certificates
• Passwords

Question 5

Which of these passwords is the strongest for authenticating to a system?

• P@55w0rd!
• P@w04d!$$L0N6
• Password!
• P@ssword!

Question 6

An organization needs to setup a(n) _____ infrastructure to issue and sign client certificates.

• CRL
• CA
• ID
• LDAP

Question 7

A network admin wants to use a Remote Authentication Dial-In User Service (RADIUS) protocol to allow 5 user accounts to connect company laptops to an access point in the office. These are generic users and will not be updated often. Which of these internal sources would be appropriate to store these accounts in?

• LDAP
• SQL database
• Flat file
• Active Directory

Question 8

Multiple client switches and routers have been set up at a small military base. The network team decided to implement Terminal Access Controller Access-Control System Plus (TACACS+), along with Kerberos, and an external Lightweight Directory Access Protocol (LDAP) service. What is the primary reason TACACS+ was chosen for this?

• Device administration
• Single Sign-On
• NIPRNet
• Network access

Question 9

In the three As of security, which part pertains to describing what the user account does or doesn’t have access to?

• Authentication
• Authorization
• Accessibility
• Accounting

Question 10

An Open Authorization (OAuth) access token would have a _____ that tells what the third party app has access to.

• template
• scope
• e-mail
• request

Question 11

A network admin deployed a Terminal Access Controller Access Control System Plus (TACACS+) system so other admins can properly manage multiple switches and routers on the local area network (LAN). The system will keep track and log admin access to each device and the changes made. This “logging” satisfies which part of the three As of security?

• Administration
• Authentication
• Authorization
• Accounting