SSCP: Systems Security Certified Practitioner Access Controls Questions Complete With Correct Answers

SSCP: Systems Security Certified Practitioner Access Controls Questions Complete With Correct Answers Q.Authentication applies to - ANSWERS-Users, applications and devices Q.Authentication is the process of - ANSWERS-proving identity in order to gain access to a resource Q.Authentication proves what - ANSWERS-entity attempting to log on is who / what they claim to be Q.Authentication limits - ANSWERS-access to only those who should have it Q.Authentication lets administrators do what - ANSWERS-set limitations on what users gain access to Q.Most common type of authentication - ANSWERS-something you know, something you have, something you are Q.Something you know - ANSWERS-passwords and pins Q.Password best practice - ANSWERS-strong, do not write down, never share, audit for strength and changed at set intervals Q.Something you have - ANSWERS-proximity cards, smart cards, hardware tokens, ID bodges Q.Something you are - ANSWERS-Biometrics Q.Biometrics challenges - ANSWERS-error rates Q.Single factor authentication is - ANSWERS-using only one factor of authentication Q.Single factor authentication can use what type of authentication? - ANSWERS-either something you know, something you have, something you are Q.Multifactor Authentication is the use of what - ANSWERS-more than one factor of authentication Q.SSO - ANSWERS-Single Sign-On Q.SSO allows what? - ANSWERS-user to access multiple systems, resources and applications by one login Q.SSO advantage - ANSWERS-simplifies identity management and no multiple logins required Q.SSO uses what? - ANSWERS-Central DB or Directory to store users ID and credentials Q.A token can be used for what? - ANSWERS-granting user access to all relevant resources Q.Tokens can contain - ANSWERS-user Information Q.Examples of SSO - ANSWERS-Kerberos, Federated Access, SESAME, KryptoKnight Q.Best practice for authentication is? - ANSWERS-Authenticate both the individual and the device they use Q.To use certificate based authentication you might use what? - ANSWERS-Valid digital certificate on the machine or device or cookies. Q.Certificate based authentication is often used where? - ANSWERS-to access a VPN or a Wi-Fi