Authentication and Access Control Quiz

What does Authentication verify in a digital security context?

• Identity verification of the user through credentials

• Authorization level of the user within the system

• Type and integrity of the user's device

• Historical activity logs of the user for auditing

Which authentication method necessitates the utilization of two or more distinct factors for verification?

• Single-Factor Authentication (SFA)

• Multi-Factor Authentication (MFA)

• Password-Based Authentication

• Token-Based Authentication

What does RADIUS stand for in the context of network security protocols?

• Remote Access Dial-In User Service

• Remote Authentication Dial-In User Service

• Remote Access Data Integration Service

• Remote Authentication Data Integration Service

Which access control model empowers subjects to exercise authority over the permissions associated with their own resources?

• Role-Based Access Control (RBAC)

• Discretionary Access Control (DAC)

• Attribute-Based Access Control (ABAC)

• Mandatory Access Control (MAC)

What is a primary function of Privileged Access Management (PAM) in the context of cybersecurity frameworks?

• To enforce just-in-time access provisioning for elevated privileges

• To implement secure credential storage and management

• To facilitate secure remote access to critical systems

• To conduct continuous monitoring and auditing of privileged user activities

Which of the following is a secure method for remote access?

• Direct RDP access

• Virtual Private Network (VPN)

• Unsecured email access

• Public Wi-Fi connections

What is a best practice for securing Remote Desktop Protocol (RDP) against unauthorized access and potential vulnerabilities?

• Implement Multi-Factor Authentication (MFA) to enhance access control

• Utilize weak passwords to simplify user access

• Disable Network Level Authentication (NLA) to allow broader connectivity

• Grant all users unrestricted access to facilitate remote operations

What does Time-Based Access Control restrict?

• Access based on device type

• Access contingent upon temporal parameters

• Access predicated on geographic location

• Access determined by user roles and permissions

Which protocol is predominantly utilized for interfacing with directory services in a networked environment?

• TACACS+ (Terminal Access Controller Access-Control System Plus)

• RADIUS (Remote Authentication Dial-In User Service)

• LDAP (Lightweight Directory Access Protocol)

• SAML (Security Assertion Markup Language)

What is the inherent risk associated with Discretionary Access Control (DAC) mechanisms in information security?

• Potential for unauthorized access due to user-defined permission settings

• Implementation of rigid access control policies

• Increased complexity in access management and policy enforcement

• Restricted user autonomy in permission assignments