Disclaimer:
Educational Use Only:
The website links provided are to be used strictly for educational and knowledge-gaining purposes only.
No Misuse:
Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.
Respect for Websites and Businesses:
Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.
Acknowledge Value of Knowledge:
Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.
No Endorsement:
The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.
User Responsibility:
By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.
- Which authentication factor is involved when a user enters a password?
a. Something the user knows
b. Something the user has
c. Something the user is
d. Somewhere the user is
Answer: a. Something the user knowssanfoundry - What is the primary purpose of two-factor authentication (2FA)?
a. Increase user convenience
b. Allow passwordless login
c. Enhance authentication security
d. Replace encryption
Answer: c. Enhance authentication securitysanfoundry - Which method uses biometric data for authentication?
a. Tokens
b. CAPTCHA
c. Fingerprint scan
d. One-time passwords (OTP)
Answer: c. Fingerprint scansanfoundry - What does OTP stand for in authentication?
a. One-Time Password
b. Original Token Protocol
c. Online Trusted Portal
d. Offline Temporary Password
Answer: a. One-Time Passwordsanfoundry - Which authentication method sends a code to a user’s mobile device for login?
a. Smart card
b. Two-factor authentication
c. Biometric
d. Single sign-on
Answer: b. Two-factor authenticationsanfoundry - What is the meaning of SSO in authentication systems?
a. Single System Override
b. Secure Server Object
c. Single Sign-On
d. Secure Sign-On
Answer: c. Single Sign-Onsanfoundry - Which term best describes the process of verifying a user’s identity?
a. Authorization
b. Authentication
c. Accounting
d. Auditing
Answer: b. Authenticationsanfoundry - What kind of authentication factor is a smart card considered?
a. Something you know
b. Something you have
c. Something you are
d. Something you do
Answer: b. Something you havesanfoundry - Which protocol is widely used for federated authentication in web applications?
a. TCP/IP
b. HTTP
c. OAuth
d. SMTP
Answer: c. OAuthsanfoundry - Which of the following is an example of “something you are” as an authentication factor?
a. Password
b. Hardware token
c. Retina scan
d. Security question
Answer: c. Retina scansanfoundry - Which authentication method allows users to login to multiple systems with one set of credentials?
a. Multi-factor Authentication
b. Biometric Authentication
c. Single Sign-On
d. Social Login
Answer: c. Single Sign-Onsanfoundry - What is the main benefit of multi-factor authentication?
a. Cost reduction
b. Easier password management
c. Improved security
d. Less auditing
Answer: c. Improved securitysanfoundry - Which technology uses physical characteristics for user authentication?
a. Captcha
b. Biometric
c. Password
d. PIN
Answer: b. Biometricsanfoundry - What does Public Key Infrastructure (PKI) commonly manage?
a. Usernames
b. Digital certificates
c. Hardware tokens
d. Biometrics
Answer: b. Digital certificatessanfoundry - When a system asks for answers to personal questions before login, which factor is being used?
a. Something the user is
b. Something the user does
c. Something the user knows
d. Something the user has
Answer: c. Something the user knowssanfoundry - Which of the following is considered the weakest form of authentication?
a. Passwords
b. Biometrics
c. Smart cards
d. One-time passwords
Answer: a. Passwordssanfoundry - What is the role of Access Control List (ACL) in an authentication system?
a. Identify users
b. Manage networks
c. Define user permissions
d. Encrypt passwords
Answer: c. Define user permissionssanfoundry - What is the main disadvantage of password-based authentication?
a. Complexity
b. Susceptibility to brute force attacks
c. High cost
d. Fast login
Answer: b. Susceptibility to brute force attackssanfoundry - What is a common risk of using shared passwords?
a. Higher costs
b. Increased security
c. No effect
d. Reduced accountability
Answer: d. Reduced accountabilitysanfoundry - Which attack targets the transmission of authentication credentials?
a. SQL Injection
b. Phishing
c. Man-in-the-middle
d. Cross-site scripting
Answer: c. Man-in-the-middlesanfoundry - What is the function of CAPTCHA in authentication?
a. Encrypt passwords
b. Prevent automated bots
c. Strengthen hashing
d. Store cookies
Answer: b. Prevent automated botssanfoundry - Which of the following protocols is used for secure remote login?
a. HTTP
b. FTP
c. SSH
d. SMTP
Answer: c. SSHsanfoundry - What is the main concern when using biometric authentication?
a. Speed
b. Privacy
c. Hardware cost
d. User training
Answer: b. Privacysanfoundry - Which technology generates a new code every time a user logs in?
a. Static password
b. Token-based authentication
c. OTP-based authentication
d. SSO
Answer: c. OTP-based authenticationsanfoundry - Which protocol helps enable Single Sign-On across different domains?
a. SAML
b. POP3
c. IMAP
d. SNMP
Answer: a. SAMLsanfoundry - What is a security token in authentication?
a. A physical device generating credentials
b. A password reset tool
c. A security patch
d. Network encryption
Answer: a. A physical device generating credentialssanfoundry - Which is an example of step-up authentication?
a. Enter password twice
b. Provide password and then fingerprint
c. Use a static password only
d. Scan QR code only
Answer: b. Provide password and then fingerprintsanfoundry - What is device fingerprinting used for in authentication?
a. Identifying users based on device attributes
b. Scanning user’s fingerprints
c. Encrypting device memory
d. BIOS security
Answer: a. Identifying users based on device attributessanfoundry - Which factor category does a facial recognition system fall under?
a. Knowledge
b. Possession
c. Inherence
d. Location
Answer: c. Inherencesanfoundry - Which method strengthens authentication without requiring a password?
a. Password hint
b. Biometric scan
c. Static PIN
d. Security questions
Answer: b. Biometric scansanfoundry - What distinguishes authentication from authorization?
a. Authentication verifies identity, authorization grants access level
b. Authorization happens first
c. Authentication applies to administrators only
d. Authorization is less secure
Answer: a. Authentication verifies identity, authorization grants access levelsanfoundry - Which system allows users to log in using their Google or Facebook accounts?
a. OAuth
b. RADIUS
c. PKI
d. MD5
Answer: a. OAuthsanfoundry - Which property must passwords have for enhanced security?
a. Simplicity
b. Uniqueness and complexity
c. Repeatability
d. Uniform length
Answer: b. Uniqueness and complexitysanfoundry - What is the major benefit of using hardware tokens?
a. Reduced cost
b. Increased security against phishing
c. Forgettable codes
d. More password resets
Answer: b. Increased security against phishingsanfoundry - Which attack tries every combination of passwords?
a. Dictionary attack
b. SQL Injection
c. Brute-force attack
d. Phishing
Answer: c. Brute-force attacksanfoundry - Which tool is used to securely store and manage multiple passwords?
a. Browser
b. Clipboard
c. Password manager
d. Text file
Answer: c. Password managersanfoundry - Which method employs both a PIN and biometric for authentication?
a. Multi-factor authentication
b. Password authentication
c. Location-based authentication
d. Security questions
Answer: a. Multi-factor authenticationsanfoundry - What is federated identity management?
a. Managing passwords for several users
b. Allowing a user to access multiple systems with one identity across organizations
c. Encrypting user data
d. Limiting user rights on one server
Answer: b. Allowing a user to access multiple systems with one identity across organizationssanfoundry - What is a primary purpose of using account lockout policies?
a. Increase user logins
b. Prevent brute-force attacks
c. Enhance convenience
d. Hide user data
Answer: b. Prevent brute-force attackssanfoundry - What is the strongest combination for authentication?
a. Username and password only
b. Password and security questions
c. Smartcard, PIN, and fingerprint scan
d. PIN only
Answer: c. Smartcard, PIN, and fingerprint scansanfoundry - Which is considered a “soft token”?
a. Printed card
b. App-generated code
c. Hardware dongle
d. Password list
Answer: b. App-generated codesanfoundry - What is the risk if biometric data is compromised?
a. It can be reset easily
b. Permanent personal data exposure
c. Easy to recover
d. No impact
Answer: b. Permanent personal data exposuresanfoundry - Which entity issues digital certificates in PKI?
a. Authentication server
b. Certificate Authority
c. Security auditor
d. Hardware vendor
Answer: b. Certificate Authoritysanfoundry - What does LDAP stand for?
a. Local Directory Authentication Protocol
b. Lightweight Directory Access Protocol
c. Logical Data Assignment Protocol
d. Linked Data Authentication Process
Answer: b. Lightweight Directory Access Protocolsanfoundry - What is the main security function of hashing passwords?
a. Making passwords larger
b. Ensuring passwords are not stored in plain text
c. Printing passwords
d. None of the above
Answer: b. Ensuring passwords are not stored in plain textsanfoundry - What process confirms user identity via email link or code?
a. Phishing
b. Email verification
c. Password reset
d. Digital forensics
Answer: b. Email verificationsanfoundry - What kind of credentials does a “contactless smartcard” use?
a. Magnetic strip
b. Contact chip
c. Radio-frequency identification (RFID)
d. Username/password combo
Answer: c. Radio-frequency identification (RFID)sanfoundry - Which is a cloud-based authentication solution?
a. IAMaaS (Identity and Access Management as a Service)
b. BIOS password
c. Local drive encryption
d. Static OTP list
Answer: a. IAMaaS (Identity and Access Management as a Service)sanfoundry - Which process involves resetting a user’s authentication data to regain access?
a. Password recovery
b. Keylogging
c. Privilege escalation
d. Token revocation
Answer: a. Password recoverysanfoundry - Which of these strengthens remote authentication security for VPNs?
a. Static passwords
b. Multi-factor authentication
c. Password hints
d. Plaintext login
Answer: b. Multi-factor authenticationsanfoundry
