CNIT 242 Final Exam Questions with Correct Answers (Grade A+)
Question 1: What does AAA stand for?
Answer: Authentication, Authorization, and Accounting
Question 2: What question does Authentication answer?
Answer: Do you have the credentials necessary to access this system?
Question 3: What question does Authorization answer?
Answer: Once authenticated, what do you have permission to do?
Question 4: What question does Accounting answer?
Answer: Once authorized to access a resource, how much of the resource are you using?
Question 5: Authentication can be accomplished using any of what 4 qualifications?
Answer: What you know, what you have, what you are, where you are
Question 6: What is two-factor authentication?
Answer: Using two of the 4 authentication qualifications to prove an identity.
Question 7: What 2 steps does the authentication process involve?
Answer: Identification and proof of identification
Question 8: What are ways to provide identification?
Answer: User ID, physical object (such as ATM card), biometrics, digital certificates
Question 9: What are ways to provide proof of identification?
Answer: passwords, access codes, one-time tokens, biometrics, digital certificates
Question 10: What are strategic ways to develop user IDs?
Answer: computer generated (NEVER simple names), sometimes created to some algorithm, NEVER use
the same as email address
Page 1
,Question 11: True or False: UID / password combo can be a powerful method of authentication if
properly managed
Answer: True
Question 12: What is the number one rule of password security?
Answer: DON'T WRITE PASSWORDS DOWN
Question 13: What is the security tradeoff with password?
Answer: The more strict the password rules, the higher the chances users will violate the first rule of secure
passwords
Question 14: What are biometrics?
Answer: authentication. functions as both ID and proof of ID, separated into physiological and behavioral
Question 15: What are digital certificates?
Answer: a form of authentication. encrypted data files that uses a Certificate Authority to guarantee the
identity of the holder
Question 16: What does RADIUS stand for and what does it provide?
Answer: Remote Access Dial-In User Service, both Authentication and Authorization
Question 17: What does TACAS+ stand for?
Answer: Terminal Access Controller Access Control Service Plus
Question 18: Where does authentication across the network exist?
Answer: on the local computer by default, but in an enterprise environment, it will be on a different server
Question 19: In a domain environment, what is authenticated against?
Answer: the domain, not the local machine
Question 20: How is authorization accomplished?
Answer: through rights and permissions
Question 21: What level do group policies assign rights to?
Answer: system
Page 2
,Question 22: What level do access control lists assign permissions to?
Answer: object
Question 23: What is an access control list?
Answer: simplest method of providing authorization, but requires a separate authentication method. they are
attached to/located on the resource
Question 24: What do ACLs contain?
Answer: a list of authorized users and their authorization levels
Question 25: When do "share" permissions apply?
Answer: when the resource is accessed over a network
Question 26: What 3 servers does Kerberos require?
Answer: one authentication server, one ticket granting server, and at least one application server
Question 27: What is the basic concept of Kerberos?
Answer: If a secret is known by only two people, either person can verify the identity of the other by
confirming that the other person knows the secret.
Question 28: What is the purpose of a Kerberos Realm?
Answer: admins create the realms which encompass all that is available to access. a realm defines what
Kerberos manages in terms of who can access what.
Question 29: What is within a Kerberos Realm?
Answer: Within the realm is the Client and the service/host machine to which they requested access. There
is also the Key Distribution Center which hold the Authentication S and TGS
Question 30: In Kerberos, when requesting access to a service or host, three interactions take place
between you and:
Answer: the Authentication Server, the Ticket Granting Server, and the Service or host machine that you're
wanting access to
Question 31: What will you receive with each interaction in Kerberos?
Answer: Two messages. Each message is one that you can decrypt, and one that you can not.
Page 3
, Question 32: In Kerberos, does the service/machine you are requesting access to communicate directly
with the KDC?
Answer: No, they do not!
Question 33: Where are all the secret keys for user machines and services stored in Kerberos?
Answer: the KDC
Question 34: What are secret keys (in Kerberos)?
Answer: passwords plus a salt that are hashed
Question 35: True or False: There are passwords on the services/host machines that use Kerberos.
Answer: False
Question 36: What happens during the set up of Kerberos?
Answer: hash algorithm is chosen for secret keys, admin choses a key for the service/host machine to
memorize
Question 37: What type of cryptography does Kerberos use?
Answer: symmetric/private key, but can be configured to use public key
Question 38: How is the KDC protected?
Answer: it itself is encrypted with a master key
Question 39: What are traits of TACAS?
Answer: Cisco-proprietary, TCP, AAA are separate processes
Question 40: What are traits of RADIUS?
Answer: Open standard, UDP, combines Authentication and Authorization, only encrypts password
Question 41: What are traits of Kerberos?
Answer: Authentication only, no Authorization or Accounting
Question 42: What standard does naming in AD follow?
Answer: LDAP standard
Page 4
Question 1: What does AAA stand for?
Answer: Authentication, Authorization, and Accounting
Question 2: What question does Authentication answer?
Answer: Do you have the credentials necessary to access this system?
Question 3: What question does Authorization answer?
Answer: Once authenticated, what do you have permission to do?
Question 4: What question does Accounting answer?
Answer: Once authorized to access a resource, how much of the resource are you using?
Question 5: Authentication can be accomplished using any of what 4 qualifications?
Answer: What you know, what you have, what you are, where you are
Question 6: What is two-factor authentication?
Answer: Using two of the 4 authentication qualifications to prove an identity.
Question 7: What 2 steps does the authentication process involve?
Answer: Identification and proof of identification
Question 8: What are ways to provide identification?
Answer: User ID, physical object (such as ATM card), biometrics, digital certificates
Question 9: What are ways to provide proof of identification?
Answer: passwords, access codes, one-time tokens, biometrics, digital certificates
Question 10: What are strategic ways to develop user IDs?
Answer: computer generated (NEVER simple names), sometimes created to some algorithm, NEVER use
the same as email address
Page 1
,Question 11: True or False: UID / password combo can be a powerful method of authentication if
properly managed
Answer: True
Question 12: What is the number one rule of password security?
Answer: DON'T WRITE PASSWORDS DOWN
Question 13: What is the security tradeoff with password?
Answer: The more strict the password rules, the higher the chances users will violate the first rule of secure
passwords
Question 14: What are biometrics?
Answer: authentication. functions as both ID and proof of ID, separated into physiological and behavioral
Question 15: What are digital certificates?
Answer: a form of authentication. encrypted data files that uses a Certificate Authority to guarantee the
identity of the holder
Question 16: What does RADIUS stand for and what does it provide?
Answer: Remote Access Dial-In User Service, both Authentication and Authorization
Question 17: What does TACAS+ stand for?
Answer: Terminal Access Controller Access Control Service Plus
Question 18: Where does authentication across the network exist?
Answer: on the local computer by default, but in an enterprise environment, it will be on a different server
Question 19: In a domain environment, what is authenticated against?
Answer: the domain, not the local machine
Question 20: How is authorization accomplished?
Answer: through rights and permissions
Question 21: What level do group policies assign rights to?
Answer: system
Page 2
,Question 22: What level do access control lists assign permissions to?
Answer: object
Question 23: What is an access control list?
Answer: simplest method of providing authorization, but requires a separate authentication method. they are
attached to/located on the resource
Question 24: What do ACLs contain?
Answer: a list of authorized users and their authorization levels
Question 25: When do "share" permissions apply?
Answer: when the resource is accessed over a network
Question 26: What 3 servers does Kerberos require?
Answer: one authentication server, one ticket granting server, and at least one application server
Question 27: What is the basic concept of Kerberos?
Answer: If a secret is known by only two people, either person can verify the identity of the other by
confirming that the other person knows the secret.
Question 28: What is the purpose of a Kerberos Realm?
Answer: admins create the realms which encompass all that is available to access. a realm defines what
Kerberos manages in terms of who can access what.
Question 29: What is within a Kerberos Realm?
Answer: Within the realm is the Client and the service/host machine to which they requested access. There
is also the Key Distribution Center which hold the Authentication S and TGS
Question 30: In Kerberos, when requesting access to a service or host, three interactions take place
between you and:
Answer: the Authentication Server, the Ticket Granting Server, and the Service or host machine that you're
wanting access to
Question 31: What will you receive with each interaction in Kerberos?
Answer: Two messages. Each message is one that you can decrypt, and one that you can not.
Page 3
, Question 32: In Kerberos, does the service/machine you are requesting access to communicate directly
with the KDC?
Answer: No, they do not!
Question 33: Where are all the secret keys for user machines and services stored in Kerberos?
Answer: the KDC
Question 34: What are secret keys (in Kerberos)?
Answer: passwords plus a salt that are hashed
Question 35: True or False: There are passwords on the services/host machines that use Kerberos.
Answer: False
Question 36: What happens during the set up of Kerberos?
Answer: hash algorithm is chosen for secret keys, admin choses a key for the service/host machine to
memorize
Question 37: What type of cryptography does Kerberos use?
Answer: symmetric/private key, but can be configured to use public key
Question 38: How is the KDC protected?
Answer: it itself is encrypted with a master key
Question 39: What are traits of TACAS?
Answer: Cisco-proprietary, TCP, AAA are separate processes
Question 40: What are traits of RADIUS?
Answer: Open standard, UDP, combines Authentication and Authorization, only encrypts password
Question 41: What are traits of Kerberos?
Answer: Authentication only, no Authorization or Accounting
Question 42: What standard does naming in AD follow?
Answer: LDAP standard
Page 4
