ISAC Access Control and Authentication 5

Question 1

A credential stuffing attack differs from a brute-force attack in that it:

Accepted Answer

Uses previously breached username/password pairs from other sites

Answer

Credential stuffing leverages lists of credentials stolen from past breaches, exploiting users who reuse passwords across multiple services.

Question 2

Which of the following BEST describes 'continuous authentication'?

Accepted Answer

Ongoing behavioral and contextual verification throughout a session, not just at login

Answer

Continuous authentication monitors user behavior, biometrics, and context throughout a session to detect anomalies that may indicate account compromise after the initial login.

Question 3

An administrator grants a contractor temporary elevated permissions for a project and automatically revokes them after 30 days. This practice is best described as:

Accepted Answer

Just-in-Time (JIT) Access

Answer

Just-in-Time (JIT) access provisions elevated permissions only when needed and for a limited duration, reducing the risk of standing privileged access.

Question 4

Which authentication weakness does salting a password hash specifically address?

Accepted Answer

Rainbow table attacks that use precomputed hash-to-password mappings

Answer

Salting adds a unique random value to each password before hashing, making precomputed rainbow tables useless because every stored hash is unique even for identical passwords.

Question 5

What is the purpose of mutual authentication in a client-server communication model?

Accepted Answer

Both the client and server independently verify each other's identities before exchanging data

Answer

Mutual authentication requires both parties to verify each other's identities, preventing man-in-the-middle attacks by ensuring neither party is an impostor.

(ISAC) International Society for the Advancement of Cytometry Practice Test

(ISAC) International Society for the Advancement of Cytometry Practice Test

ISAC Access Control and Authentication 5