CyberSec-TestD

Ruth, a security professional, wanted to confirm the identity of newly joined employees. She sent email links of the company's portal to all the newly joined employees. The employees need to enter initial access token to login on to the portal, then they will receive an OTP on their mobile phone to upload their scanned certificate copies. Which of the following types of authentication has Ruth implemented in this scenario?

• Password authentication

• Two-factor authentication

• Biometric authentication

• Single sign-on (SSO) authentication

Obi, a security specialist at an organization, was tasked with implementing an authentication mechanism for their employees. He employed an authentication mechanism that scans the facial features of employees and compares them with the patterns stored in the database. ........ authentication method was implemented by Obi here. (One word only)

Which of the following types of accounts are the default accounts of operating systems and run with the least privileges, with permissions such as running applications and creating and manipulating files that belong to their profile? (Two Correct Answers)

• User accounts

• Guest accounts

• Root accounts

• Privileged accounts

Fumilayo, a security professional, was instructed to limit employees’ access to critical resources. For this purpose, she implemented an access principle that provides permission to access only necessary resources that are required for their job tasks. The permissions can be extended later based on changes in their job roles. Identify the access principle implemented by Fumilayo in this situation.

• Separation of duties

• Need-to-know

• Principle of least privilege

• Rule-based access control

Bello, an employee at a software company, needs to log in every day before starting his work. The company has a separate HR portal for maintaining employee attendance details. Every day, Bello accesses the portal, provides his credentials, and logs in before starting his work. The ............... authentication method is demonstrated in the above scenario. (One word only)

Identify the access control principle that ensures that no single individual has the authorization rights to perform all functions and simultaneously denies access of all the objects to a single individual.

• Principle of highest privilege (PoHP)

• Separation of Duties (SoD)

• Need-to-know principle

• Discretionary Access control (DAC)

Okon, a network administrator, was assigned a task to create a standard access control model for the organization's confidential data. He implemented an access control model that determines the usage and access policies for the users. After its implementation, only users with appropriate access rights can access the resource. Which of the following access control models has Okon implemented in the cited scenario above?

• Mandatory access control (MAC)

• Discretionary access control (DAC)

• Role-based access control (RBAC)

• Rule-based access control (RB-RBAC)

Idahosa, a security professional, was hired by an organization to update and make configuration changes to their existing systems. For this purpose, he was provided with a type of account that contains elevated privileges to perform administrative activities such as installing and uninstalling applications or system software. Which of the following types of account was provided to Idahosa in the above case?

• User Account

• Root Account

• Guest Account

• Default Account

What is a characteristic of AAA?

• Authorization can only be implemented after a user is authenticated

• Accounting services are implemented prior to authenticating a user

• Accounting services determine which resources the user can access and which operations the user is allowed to perform.

• Authorization records what the user does, including what is accessed, the amount of time the resource is accessed, and any changes that were made.

Due to implemented security controls, a user can only access a server with FTP service. Which AAA component accomplishes this?

• accessibility

• accounting

• auditing

• authentication

• authorization