Chapter 4

Question 1

What is 802.11i used for?

Answer 1

Wifi Security Standard, fully implemented in WPA2

Question 2

What is 802.1x used for?

Answer 2

to authenticate devices

Question 3

How do you describe CER?

Answer 3

The point at which false rejections and false acceptances are equal

Question 4

What is type I authentication?

Answer 4

Something you know

Question 5

What is type II authentication?

Answer 5

Something you have

Question 6

What is type III authentication?

Answer 6

Something you are

Question 7

What does SAML do?

Answer 7

XML Open standard data format for exchanging authentication and authorization data between parties

Question 8

What does OAUTH do?

Answer 8

open standard for token based authentication and authorization on the internet and allow end users account info to be used by third party services, without exposing password

Question 9

What does OpenID do?

Answer 9

done by third party, used to sign in to any website that accepts it

Question 10

What is NTLM?

Answer 10

Used by Windows to authenticate server that is not part of network domain

Question 11

What network protocol can uses digital certificates to authenticate with RADIUS?

Answer 11

802.1x

Question 12

How are rainbow tables best mitigated against?

Answer 12

Longer Passwords

Question 13

What does Kerberos use to issue tickets?

Answer 13

Key Distribution Center

Question 14

What does TACACS+ do?

Answer 14

Provides authentication and authorization and accounting requests against central database

Question 15

What is a weakness if SAML?

Answer 15

The integrity of it’s users.

Question 16

What is Shibboleth?

Answer 16

Middleware solution for authentication and identity management that uses SAML.

Question 17

What is Credentialed Management?

Answer 17

Allows users to avoid to remember login credentials use logins from the originating network.

Question 18

What is the weakness of PAP?

Answer 18

Credentials sent in cleartext.

Question 19

Difference between CHAP and MS-CHAPv2?

Answer 19

MS-CHAPv2 provides for mutual authentication and CHAP only provides authenticating client to the server.

Question 20

Which access control model is based on the Trusted Computer System Evaluation Criteria (TCSEC)?

Answer 20

DAC

Question 21

Ingrid is reviewing her company’s recertification policy. Which of the following is the best reason to recertify?

Answer 21

to audit permissions