CNIT 242 EXAM 1 |COMPLETE QUESTIONS WITH 100% RATED
EXPERT SOLUTIONS |2026 LATEST UPDATED
3 A's - (answer)Authorization, Accounting, Authentication
What can you use to accomplish authentication? - (answer)What you know, what you have, what
you are, where you are
What are the two basic parts of authentication? - (answer)Who you are, and proof that you are
who you say you are (ID & Proof of ID)
Examples of Identification - (answer)User ID, physical object (ATM card), biometrics, digital
certificates
Examples of Proof of Identification - (answer)Password, access code, one-time token,
biometrics, digital certificates
T/F: It is good practice for user ID to be the same as email address. - (answer)False
Rules of passwords - (answer)1. Don't write them down!
,Avoid easy to guess passwords, do not let them contain account name or display name, force
periodic password changes between 30 days-1 year, disallow last x passwords, use non-alpha
characters, disallow plain English passwords.
protocols to enable communication for authentication - (answer)Domain logon, RADIAS
(Remote Authentication Dial In User Service), TACACS+ (Terminal Access Controller Access
Control System)
Define authorization - (answer)Users should only be allowed to access resources that they are
supposed to be able to access.
T/F: it is best to assign rights and permissions to groups rather than to individual users. -
(answer)True
What is an ACL? - (answer)Access control list, simplest method of providing authorization.
Contain a list of authorized users and their authorization level, are attached to individual
resources. Used in Windows.
T/F: Kerberos, by default, uses public-key cryptography. - (answer)False. Kerberos can be
configured to use public-key cryptography, but is typically reliant on symmetric key
cryptography.
, In Kerberos, what is a KDC? - (answer)Key Distribution Center: stores all of the secret keys for
user machines and services in its database.
T/F: In Kerberos, the KDC and the machine you request access to communicate directly. -
(answer)False
What is Accounting? - (answer)Once authorized to access a resource, how much of the resource
are you using?
Define directory - (answer)A directory is a centralized, hierarchical information repository about
objects in an IT system. Functions to organize and centralize info and objects.
What is Directory Services? - (answer)Protocols, functions, and APIs that allow access to
directory information
What is DAP? What is LDAP? - (answer)DAP: Directory Access Protocol; LDAP: Lightweight
Directory Access Protocol
EXPERT SOLUTIONS |2026 LATEST UPDATED
3 A's - (answer)Authorization, Accounting, Authentication
What can you use to accomplish authentication? - (answer)What you know, what you have, what
you are, where you are
What are the two basic parts of authentication? - (answer)Who you are, and proof that you are
who you say you are (ID & Proof of ID)
Examples of Identification - (answer)User ID, physical object (ATM card), biometrics, digital
certificates
Examples of Proof of Identification - (answer)Password, access code, one-time token,
biometrics, digital certificates
T/F: It is good practice for user ID to be the same as email address. - (answer)False
Rules of passwords - (answer)1. Don't write them down!
,Avoid easy to guess passwords, do not let them contain account name or display name, force
periodic password changes between 30 days-1 year, disallow last x passwords, use non-alpha
characters, disallow plain English passwords.
protocols to enable communication for authentication - (answer)Domain logon, RADIAS
(Remote Authentication Dial In User Service), TACACS+ (Terminal Access Controller Access
Control System)
Define authorization - (answer)Users should only be allowed to access resources that they are
supposed to be able to access.
T/F: it is best to assign rights and permissions to groups rather than to individual users. -
(answer)True
What is an ACL? - (answer)Access control list, simplest method of providing authorization.
Contain a list of authorized users and their authorization level, are attached to individual
resources. Used in Windows.
T/F: Kerberos, by default, uses public-key cryptography. - (answer)False. Kerberos can be
configured to use public-key cryptography, but is typically reliant on symmetric key
cryptography.
, In Kerberos, what is a KDC? - (answer)Key Distribution Center: stores all of the secret keys for
user machines and services in its database.
T/F: In Kerberos, the KDC and the machine you request access to communicate directly. -
(answer)False
What is Accounting? - (answer)Once authorized to access a resource, how much of the resource
are you using?
Define directory - (answer)A directory is a centralized, hierarchical information repository about
objects in an IT system. Functions to organize and centralize info and objects.
What is Directory Services? - (answer)Protocols, functions, and APIs that allow access to
directory information
What is DAP? What is LDAP? - (answer)DAP: Directory Access Protocol; LDAP: Lightweight
Directory Access Protocol
