Exam 5: Access Control

A Microsoft domain can have multiple domain controllers.

A(n) ________ is the set of attributes about a person or resource that must be revealed in a particular context.

Which of the following is one of the four bases for authentication credentials?

________ is the centralized policy based management of all information required for access to corporate systems by people, machines, programs, or other resources.

CAs distribute public keys ________.

In the military, departments do not have the ability to alter access control rules set by higher authorities in ________.

________ is a social engineering trick where an intruder may follow an authorized user through a door that the authorized user opens with an access device.

For watch lists of criminals, a false acceptance is worse than a false rejection from a security viewpoint.

Authentication is the process of collecting information about the activities of each individual in log files for immediate and later analysis.

Most users who have access to servers use reusable passwords for authentication.

It is illegal to go through a company's trash bins even if the trash bins are outside the corporation.

Verification is the process where the verifier determines the identity of the supplicant.

Microsoft domains can be organized into trees, and trees can be organized into forests.

A ________ is a small device that plugs into a standard computer port to identify the owner.

In directory servers, ________.

Authorizations are also called ________.

Passwords should be changed frequently.

Which of the following should be forbidden in secure areas?

________ can be used to supply power during long power outages.

________ is possible today.