ISAC Access Control and Authentication 2

Question 1

Which authentication protocol uses tickets issued by a Key Distribution Center (KDC) to grant access to network services?

Accepted Answer

Kerberos

Answer

RADIUS

Answer

LDAP

Answer

TACACS+

Question 2

What is the primary difference between identification and authentication?

Accepted Answer

Identification claims an identity; authentication proves that identity

Answer

Identification grants access; authentication logs the event

Answer

Authentication claims an identity; identification verifies permissions

Answer

They are interchangeable terms in access control

Question 3

A user logs into a corporate portal once and gains access to email, HR systems, and project tools without re-entering credentials. This describes which concept?

Accepted Answer

Single Sign-On (SSO)

Answer

Federated Identity Management

Answer

Mutual Authentication

Answer

Delegated Authorization

Question 4

Which of the following best describes a brute-force attack against an authentication system?

Accepted Answer

Systematically trying all possible credential combinations until successful

Answer

Intercepting authentication tokens in transit

Answer

Exploiting session tokens after a valid login

Answer

Sending malformed inputs to bypass credential checks

Question 5

In the context of multi-factor authentication (MFA), a hardware token that generates a time-based one-time password (TOTP) represents which factor category?

Accepted Answer

Something you have

Answer

Something you know

Answer

Something you are

Answer

Somewhere you are

Question 6

Which access control model assigns permissions based on the sensitivity labels of objects and the security clearances of subjects, with decisions made by the system rather than the owner?

Accepted Answer

Mandatory Access Control (MAC)

Answer

Discretionary Access Control (DAC)

Answer

Role-Based Access Control (RBAC)

Answer

Attribute-Based Access Control (ABAC)

Question 7

An organization configures its VPN to require both a password and a certificate installed on the user's registered device. Which security principle does this reinforce?

Accepted Answer

Multi-Factor Authentication

Answer

Least Privilege

Answer

Defense in Depth

Answer

Separation of Duties