Question 1

To assist with controlling orphaned and dormant accounts, what can be used to indicate when an account is no longer active?

Accepted Answer

A) Password expiration 
B) Account expiration 
C) Last login 
D) Account last used 
A) Password expiration 
B) Account expiration 
C) Last login 
D) Account last used

Question 2

Matching
-​The practice of requiring that processes should be divided between two or more individuals.

Accepted Answer

A) Account expiration 
B) Discretionary access control (DA
C)  
C) Extended TACACS (XTACACS) 
D) Job rotation 
E) LDAP injection attack
F)Least privilege
G)Mandatory access control (MA
C) 
H)Separation of duties
I)TACACS+
J)Time-of-day restriction 
A) Account expiration 
B) Discretionary access control (DA
C)  
C) Extended TACACS (XTACACS) 
D) Job rotation 
E) LDAP injection attack
F)Least privilege
G)Mandatory access control (MA
C) 
H)Separation of duties
I)TACACS+
J)Time-of-day restriction

Question 3

During RADIUS authentication, what type of packet includes information such as identification of a specific AP that is sending the packet and the username and password?

Accepted Answer

A) accounting request 
B) access request 
C) verification request 
D) authentication request 
A) accounting request 
B) access request 
C) verification request 
D) authentication request

Question 4

The action that is taken by a subject over an object is called a(n):

Accepted Answer

A) authorization 
B) access 
C) control 
D) operation 
A) authorization 
B) access 
C) control 
D) operation

Question 5

Which access control model is considered to be the least restrictive?

Accepted Answer

A) Role Based Access Control 
B) Mandatory Access Control 
C) Rule Based Access Control 
D) Discretionary Access Control 
A) Role Based Access Control 
B) Mandatory Access Control 
C) Rule Based Access Control 
D) Discretionary Access Control

Question 6

Matching
-​The most restrictive access control model, typically found in military settings in which security is of supreme importance.

Accepted Answer

A) Account expiration 
B) Discretionary access control (DA
C)  
C) Extended TACACS (XTACACS) 
D) Job rotation 
E) LDAP injection attack
F)Least privilege
G)Mandatory access control (MA
C) 
H)Separation of duties
I)TACACS+
J)Time-of-day restriction 
A) Account expiration 
B) Discretionary access control (DA
C)  
C) Extended TACACS (XTACACS) 
D) Job rotation 
E) LDAP injection attack
F)Least privilege
G)Mandatory access control (MA
C) 
H)Separation of duties
I)TACACS+
J)Time-of-day restriction

Question 7

In a UAC prompt, what color is used to indicate the lowest level of risk?

Accepted Answer

A) red 
B) gray 
C) yellow 
D) green 
A) red 
B) gray 
C) yellow 
D) green

Question 8

A list that specifies which subjects are allowed to access an object and what operations they can perform on it is referred to as a(n):

Accepted Answer

A) ACE 
B) DAC 
C) entity 
D) ACL 
A) ACE 
B) DAC 
C) entity 
D) ACL

Question 9

Describe the MAC lattice model.

Accepted Answer

Different "rungs" on the MAC lattice mod

Question 10

A RADIUS ____________________ is a computer that forwards RADIUS messages among RADIUS clients and RADIUS servers.

Accepted Answer

The answer of A RADIUS ____________________ is a computer that...

To assist with controlling orphaned and dormant accounts, what can be used to indicate when an account is no longer active?

Matching -The practice of requiring that processes should be divided between two or more individuals.

During RADIUS authentication, what type of packet includes information such as identification of a specific AP that is sending the packet and the username and password?

The action that is taken by a subject over an object is called a(n):

Which access control model is considered to be the least restrictive?

Matching -The most restrictive access control model, typically found in military settings in which security is of supreme importance.

In a UAC prompt, what color is used to indicate the lowest level of risk?

A list that specifies which subjects are allowed to access an object and what operations they can perform on it is referred to as a(n):

Describe the MAC lattice model.

A RADIUS ____________________ is a computer that forwards RADIUS messages among RADIUS clients and RADIUS servers.

Introduction to Security

Malware and Social Engineering Attacks

Application and Networking-Based Attacks

Host, Application, and Data Security

Basic Cryptography

Advanced Cryptography

Network Security

Administering a Secure Network

Wireless Network Security

Mobile Device Security

Authentication and Account Management

Business Continuity

Risk Mitigation

Vulnerability Assessment and Third Party Integration

Filters

Exam 11: Access Control Fundamentals

To assist with controlling orphaned and dormant accounts, what can be used to indicate when an account is no longer active?

Matching -​The practice of requiring that processes should be divided between two or more individuals.

During RADIUS authentication, what type of packet includes information such as identification of a specific AP that is sending the packet and the username and password?

The action that is taken by a subject over an object is called a(n):

Which access control model is considered to be the least restrictive?

Matching -​The most restrictive access control model, typically found in military settings in which security is of supreme importance.

In a UAC prompt, what color is used to indicate the lowest level of risk?

A list that specifies which subjects are allowed to access an object and what operations they can perform on it is referred to as a(n):

Describe the MAC lattice model.

A RADIUS ____________________ is a computer that forwards RADIUS messages among RADIUS clients and RADIUS servers.

Introduction to Security

Malware and Social Engineering Attacks

Application and Networking-Based Attacks

Host, Application, and Data Security

Basic Cryptography

Advanced Cryptography

Network Security

Administering a Secure Network

Wireless Network Security

Mobile Device Security

Authentication and Account Management

Business Continuity

Risk Mitigation

Vulnerability Assessment and Third Party Integration

Filters

Matching -The practice of requiring that processes should be divided between two or more individuals.

Matching -The most restrictive access control model, typically found in military settings in which security is of supreme importance.