CNIT 242 FINAL EXAM BANK |COMPLETE QUESTIONS WITH 100%
RATED EXPERT SOLUTIONS |2026 LATEST UPDATED
What does AAA stand for? - (answer)Authentication, Authorization, and Accounting
What question does Authentication answer? - (answer)Do you have the credentials necessary to
access this system?
What question does Authorization answer? - (answer)Once authenticated, what do you have
permission to do?
What question does Accounting answer? - (answer)Once authorized to access a resource, how
much of the resource are you using?
Authentication can be accomplished using any of what 4 qualifications? - (answer)What you
know, what you have, what you are, where you are
What is two-factor authentication? - (answer)Using two of the 4 authentication qualifications to
prove an identity.
,What 2 steps does the authentication process involve? - (answer)Identification and proof of
identification
What are ways to provide identification? - (answer)User ID, physical object (such as ATM card),
biometrics, digital certificates
What are ways to provide proof of identification? - (answer)passwords, access codes, one-time
tokens, biometrics, digital certificates
What are strategic ways to develop user IDs? - (answer)computer generated (NEVER simple
names), sometimes created to some algorithm, NEVER use the same as email address
True or False: UID / password combo can be a powerful method of authentication if properly
managed - (answer)True
What is the number one rule of password security? - (answer)DON'T WRITE PASSWORDS
DOWN
What is the security tradeoff with password? - (answer)The more strict the password rules, the
higher the chances users will violate the first rule of secure passwords
,What are biometrics? - (answer)authentication. functions as both ID and proof of ID, separated
into physiological and behavioral
What are digital certificates? - (answer)a form of authentication. encrypted data files that uses a
Certificate Authority to guarantee the identity of the holder
What does RADIUS stand for and what does it provide? - (answer)Remote Access Dial-In User
Service, both Authentication and Authorization
What does TACAS+ stand for? - (answer)Terminal Access Controller Access Control Service
Plus
Where does authentication across the network exist? - (answer)on the local computer by default,
but in an enterprise environment, it will be on a different server
In a domain environment, what is authenticated against? - (answer)the domain, not the local
machine
How is authorization accomplished? - (answer)through rights and permissions
, What level do group policies assign rights to? - (answer)system
What level do access control lists assign permissions to? - (answer)object
What is an access control list? - (answer)simplest method of providing authorization, but requires
a separate authentication method. they are attached to/located on the resource
What do ACLs contain? - (answer)a list of authorized users and their authorization levels
When do "share" permissions apply? - (answer)when the resource is accessed over a network
What 3 servers does Kerberos require? - (answer)one authentication server, one ticket granting
server, and at least one application server
What is the basic concept of Kerberos? - (answer)If a secret is known by only two people, either
person can verify the identity of the other by confirming that the other person knows the secret.
RATED EXPERT SOLUTIONS |2026 LATEST UPDATED
What does AAA stand for? - (answer)Authentication, Authorization, and Accounting
What question does Authentication answer? - (answer)Do you have the credentials necessary to
access this system?
What question does Authorization answer? - (answer)Once authenticated, what do you have
permission to do?
What question does Accounting answer? - (answer)Once authorized to access a resource, how
much of the resource are you using?
Authentication can be accomplished using any of what 4 qualifications? - (answer)What you
know, what you have, what you are, where you are
What is two-factor authentication? - (answer)Using two of the 4 authentication qualifications to
prove an identity.
,What 2 steps does the authentication process involve? - (answer)Identification and proof of
identification
What are ways to provide identification? - (answer)User ID, physical object (such as ATM card),
biometrics, digital certificates
What are ways to provide proof of identification? - (answer)passwords, access codes, one-time
tokens, biometrics, digital certificates
What are strategic ways to develop user IDs? - (answer)computer generated (NEVER simple
names), sometimes created to some algorithm, NEVER use the same as email address
True or False: UID / password combo can be a powerful method of authentication if properly
managed - (answer)True
What is the number one rule of password security? - (answer)DON'T WRITE PASSWORDS
DOWN
What is the security tradeoff with password? - (answer)The more strict the password rules, the
higher the chances users will violate the first rule of secure passwords
,What are biometrics? - (answer)authentication. functions as both ID and proof of ID, separated
into physiological and behavioral
What are digital certificates? - (answer)a form of authentication. encrypted data files that uses a
Certificate Authority to guarantee the identity of the holder
What does RADIUS stand for and what does it provide? - (answer)Remote Access Dial-In User
Service, both Authentication and Authorization
What does TACAS+ stand for? - (answer)Terminal Access Controller Access Control Service
Plus
Where does authentication across the network exist? - (answer)on the local computer by default,
but in an enterprise environment, it will be on a different server
In a domain environment, what is authenticated against? - (answer)the domain, not the local
machine
How is authorization accomplished? - (answer)through rights and permissions
, What level do group policies assign rights to? - (answer)system
What level do access control lists assign permissions to? - (answer)object
What is an access control list? - (answer)simplest method of providing authorization, but requires
a separate authentication method. they are attached to/located on the resource
What do ACLs contain? - (answer)a list of authorized users and their authorization levels
When do "share" permissions apply? - (answer)when the resource is accessed over a network
What 3 servers does Kerberos require? - (answer)one authentication server, one ticket granting
server, and at least one application server
What is the basic concept of Kerberos? - (answer)If a secret is known by only two people, either
person can verify the identity of the other by confirming that the other person knows the secret.
