CNIT 242 Exam 1 Lectures 1-4 Questions
With Correct Answers
What is AAA? - CORRECT ANSWER✔✔-Authentication, Authorization, and
| | | | | | | |
Accounting
What is Authentication in terms of AAA? - CORRECT ANSWER✔✔-Determining
| | | | | | | | | |
the user has the credentials necessary to access the system. (What you know,
| | | | | | | | | | | | |
what you have, what you are, where you are)
| | | | | | | |
What is Authorization in terms of AAA? - CORRECT ANSWER✔✔-The permissions
| | | | | | | | | | |
the user has after being authenticated.
| | | | |
What is Accounting in terms of AAA? - CORRECT ANSWER✔✔-The amount of
| | | | | | | | | | | |
resources the user is using.
| | | |
What is multi-factor Authentication? - CORRECT ANSWER✔✔-Using two or more
| | | | | | | | | |
credentials to gain access to the system.
| | | | | |
Describe password best practices - CORRECT ANSWER✔✔-Don't write passwords
| | | | | | | | |
down, vary characters and case, change passwords every 90 days, use multiple
| | | | | | | | | | | |
different passwords |
, Rights versus Permissions - CORRECT ANSWER✔✔-Rights are at a system level;
| | | | | | | | | | |
permissions are at an object level. Permissions vary based on the object type (file
| | | | | | | | | | | | | |
systems versus printers).
| |
Describe how ACL works - CORRECT ANSWER✔✔-Access Control List - A resource
| | | | | | | | | | | |
contains a list of authorized users and their authorization level (simplest form of
| | | | | | | | | | | | |
authorization)
Calculate Effective Permissions - CORRECT ANSWER✔✔-Implicit vs. Explicit,
| | | | | | | |
inheritance, etc. |
Articulate Kerberos Process - CORRECT ANSWER✔✔-1. Client sends an
| | | | | | | | |
Authentication Request to the Authentication Server | | | | |
2. AS authenticates the user and delivers a Ticket Granting Token (TGT)
| | | | | | | | | | |
3. Client provides the TGT to the Ticket Granting Server when it wants to access a
| | | | | | | | | | | | | | | |
resource.
4. TGS authenticates the user and provides a Service Granting Ticket
| | | | | | | | | |
5. Client provides the SGT to the application server.
| | | | | | | |
6. Access to the application is granted.
| | | | | |
What are RADIUS, TACACS+, and Diameter types of? - CORRECT ANSWER✔✔-
| | | | | | | | | |
Authorization protocols where users authenticate against the domain.
| | | | | | |
RADIUS - CORRECT ANSWER✔✔-Remote Authentication Dial-In Service - external
| | | | | | | | |
server the users authenticate with; uses UDP
| | | | | |
With Correct Answers
What is AAA? - CORRECT ANSWER✔✔-Authentication, Authorization, and
| | | | | | | |
Accounting
What is Authentication in terms of AAA? - CORRECT ANSWER✔✔-Determining
| | | | | | | | | |
the user has the credentials necessary to access the system. (What you know,
| | | | | | | | | | | | |
what you have, what you are, where you are)
| | | | | | | |
What is Authorization in terms of AAA? - CORRECT ANSWER✔✔-The permissions
| | | | | | | | | | |
the user has after being authenticated.
| | | | |
What is Accounting in terms of AAA? - CORRECT ANSWER✔✔-The amount of
| | | | | | | | | | | |
resources the user is using.
| | | |
What is multi-factor Authentication? - CORRECT ANSWER✔✔-Using two or more
| | | | | | | | | |
credentials to gain access to the system.
| | | | | |
Describe password best practices - CORRECT ANSWER✔✔-Don't write passwords
| | | | | | | | |
down, vary characters and case, change passwords every 90 days, use multiple
| | | | | | | | | | | |
different passwords |
, Rights versus Permissions - CORRECT ANSWER✔✔-Rights are at a system level;
| | | | | | | | | | |
permissions are at an object level. Permissions vary based on the object type (file
| | | | | | | | | | | | | |
systems versus printers).
| |
Describe how ACL works - CORRECT ANSWER✔✔-Access Control List - A resource
| | | | | | | | | | | |
contains a list of authorized users and their authorization level (simplest form of
| | | | | | | | | | | | |
authorization)
Calculate Effective Permissions - CORRECT ANSWER✔✔-Implicit vs. Explicit,
| | | | | | | |
inheritance, etc. |
Articulate Kerberos Process - CORRECT ANSWER✔✔-1. Client sends an
| | | | | | | | |
Authentication Request to the Authentication Server | | | | |
2. AS authenticates the user and delivers a Ticket Granting Token (TGT)
| | | | | | | | | | |
3. Client provides the TGT to the Ticket Granting Server when it wants to access a
| | | | | | | | | | | | | | | |
resource.
4. TGS authenticates the user and provides a Service Granting Ticket
| | | | | | | | | |
5. Client provides the SGT to the application server.
| | | | | | | |
6. Access to the application is granted.
| | | | | |
What are RADIUS, TACACS+, and Diameter types of? - CORRECT ANSWER✔✔-
| | | | | | | | | |
Authorization protocols where users authenticate against the domain.
| | | | | | |
RADIUS - CORRECT ANSWER✔✔-Remote Authentication Dial-In Service - external
| | | | | | | | |
server the users authenticate with; uses UDP
| | | | | |
