ISAC Access Control and Authentication 2

Question 1

Which authentication protocol uses tickets issued by a Key Distribution Center (KDC) to grant access to network services?

Accepted Answer

Kerberos

Answer

Kerberos uses a KDC that issues Ticket-Granting Tickets (TGTs) and service tickets to authenticate users without repeatedly sending credentials.

Question 2

What is the primary difference between identification and authentication?

Accepted Answer

Identification claims an identity; authentication proves that identity

Answer

Identification is the act of claiming an identity (e.g., providing a username), while authentication is proving that claim (e.g., providing a correct password).

Question 3

A user logs into a corporate portal once and gains access to email, HR systems, and project tools without re-entering credentials. This describes which concept?

Accepted Answer

Single Sign-On (SSO)

Answer

Single Sign-On (SSO) allows a user to authenticate once and access multiple applications without repeated logins.

Question 4

Which of the following best describes a brute-force attack against an authentication system?

Accepted Answer

Systematically trying all possible credential combinations until successful

Answer

A brute-force attack exhaustively tries every possible password or key combination until the correct one is found.

Question 5

In the context of multi-factor authentication (MFA), a hardware token that generates a time-based one-time password (TOTP) represents which factor category?

Accepted Answer

Something you have

Answer

A physical hardware token is a possession-based factor — 'something you have' — because it is a physical device the user must possess.

(ISAC) International Society for the Advancement of Cytometry Practice Test

(ISAC) International Society for the Advancement of Cytometry Practice Test

ISAC Access Control and Authentication 2