WGU D430 COMPLETE QUESTIONS AND
SOLUTIONS TESTED ANSWERS
◉ Universality
Answer: Stipulates that we should be able to find our chosen
biometric characteristics in the majority of people we expect to
enroll in the system
◉ uniqueness
Answer: A measure of how unique a particular characteristic is
among individuals
◉ Permanence
Answer: Tests show how well a particular characteristic resists
change over time and with advancing age
◉ Collectibility
Answer: Measures how easy it is to acquire a characteristic with
which we can use later to authenticate a user
◉ Performance
Answer: A set of metrics that judge how well a given system
functions
,◉ Acceptability
Answer: A measure of how acceptable the particular characteristic is
to the users of the system
◉ circumvention
Answer: Describes the ease with which a system can be tricked by a
falsified biometric identifier
◉ Hardware tokens
Answer: Physical devices that generate a one time password (
something you have )
◉ Software tokens
Answer: Applications that generate OTP
◉ one time password
Answer: OTP passwords that expire after a time frame of after one
time usage
◉ Authorization
Answer: What the user can access, modify, and delete
,◉ Principle of Least Privilege
Answer: The lowest level of authorization allowed to a user to
preform duties
◉ Allowing access
Answer: Let's us give a particular party or parties access to a given
resource
◉ Denying access
Answer: Simply the opposite of granting access
◉ Limiting access
Answer: Refers to allowing some access to out resource, but only up
to a certain point
◉ sandbox
Answer: A set of resources devoted to a program, process, or similar
entity, outside of which the entity cannot operate
◉ Revoking access
Answer: Takes access that was once allowed away from the user.
◉ ACLs (access control lists)
, Answer: The means by which we implement authorization and deny
or allow access to parties based on what resources we have
determined they should be allowed access to .
◉ capability-based security
Answer: The use of a token that controls our access
◉ Read
Answer: Allowing us to access the contents of a file or directory
◉ Write
Answer: Write to a file or directory
◉ Execute
Answer: Execute the contents of the file
◉ Network ACLs
Answer: Access controlled by the identifiers we use for network
transactions such as ip address, MAC address and ports
◉ confused deputy problem
Answer: A type of attack that is more common in systems that use
ACLs rather than capabilities;
SOLUTIONS TESTED ANSWERS
◉ Universality
Answer: Stipulates that we should be able to find our chosen
biometric characteristics in the majority of people we expect to
enroll in the system
◉ uniqueness
Answer: A measure of how unique a particular characteristic is
among individuals
◉ Permanence
Answer: Tests show how well a particular characteristic resists
change over time and with advancing age
◉ Collectibility
Answer: Measures how easy it is to acquire a characteristic with
which we can use later to authenticate a user
◉ Performance
Answer: A set of metrics that judge how well a given system
functions
,◉ Acceptability
Answer: A measure of how acceptable the particular characteristic is
to the users of the system
◉ circumvention
Answer: Describes the ease with which a system can be tricked by a
falsified biometric identifier
◉ Hardware tokens
Answer: Physical devices that generate a one time password (
something you have )
◉ Software tokens
Answer: Applications that generate OTP
◉ one time password
Answer: OTP passwords that expire after a time frame of after one
time usage
◉ Authorization
Answer: What the user can access, modify, and delete
,◉ Principle of Least Privilege
Answer: The lowest level of authorization allowed to a user to
preform duties
◉ Allowing access
Answer: Let's us give a particular party or parties access to a given
resource
◉ Denying access
Answer: Simply the opposite of granting access
◉ Limiting access
Answer: Refers to allowing some access to out resource, but only up
to a certain point
◉ sandbox
Answer: A set of resources devoted to a program, process, or similar
entity, outside of which the entity cannot operate
◉ Revoking access
Answer: Takes access that was once allowed away from the user.
◉ ACLs (access control lists)
, Answer: The means by which we implement authorization and deny
or allow access to parties based on what resources we have
determined they should be allowed access to .
◉ capability-based security
Answer: The use of a token that controls our access
◉ Read
Answer: Allowing us to access the contents of a file or directory
◉ Write
Answer: Write to a file or directory
◉ Execute
Answer: Execute the contents of the file
◉ Network ACLs
Answer: Access controlled by the identifiers we use for network
transactions such as ip address, MAC address and ports
◉ confused deputy problem
Answer: A type of attack that is more common in systems that use
ACLs rather than capabilities;
