Authentication and Authorization Fundamentals

Submit

3. True or False: An access control list (ACL) specifies which users can access specific resources.

True

False

4. What is a primary benefit of using certificate-based authentication?

It requires no password management

It provides strong mutual authentication between parties

It eliminates the need for encryption

It reduces network latency significantly

Submit

6. True or False: OAuth is primarily an authentication protocol rather than an authorization protocol.

True

False

7. Which of the following is a risk associated with storing passwords in plain text?

Faster login times

Unauthorized access if the database is compromised

Easier password recovery by administrators

Reduced storage requirements

Submit

9. What is the principle of least privilege in authorization?

Grant users maximum access to simplify administration

Grant users only the minimum permissions needed for their role

Require users to request access for each resource

Deny all access by default and never grant exceptions

10. True or False: Authorization can occur without prior authentication.

True

False

11. What is the primary purpose of authentication?

Verify the identity of a user or system

Determine what resources a user can access

Encrypt data during transmission

Monitor network traffic for threats

12. Which protocol is commonly used for secure authentication over networks?

HTTP

HTTPS with TLS

FTP

Telnet

13. What is a common vulnerability in password-based authentication?

Weak or reused passwords

Passwords are too long

Passwords use special characters

Passwords require frequent changes

14. True or False: A user with authentication credentials automatically has authorization to all system resources.

True

False

Submit

16. Which authentication factor is 'something you are'?

PIN code

Security question answer

Biometric identifier

Hardware token

17. What does multi-factor authentication (MFA) require?

Multiple passwords from different accounts

Two or more different types of verification factors

Authentication from multiple administrators

Repeated login attempts within a time limit

18. True or False: Authentication and authorization serve the same security purpose.

True

False

Submit

20. Which of the following is an example of something you know for authentication?

Fingerprint

Password

Security token

Facial recognition

General Security Beginner Authentication and Authorization Quiz

1. A security token used for authentication is often called a ____.

2.

What first name or nickname would you like us to use?

2. The practice of requiring users to change passwords regularly is intended to reduce ____ exposure.

3. True or False: An access control list (ACL) specifies which users can access specific resources.

4. What is a primary benefit of using certificate-based authentication?

5. Session tokens are used to maintain ____ after initial authentication.

6. True or False: OAuth is primarily an authentication protocol rather than an authorization protocol.

7. Which of the following is a risk associated with storing passwords in plain text?

8. Single Sign-On (SSO) allows users to ____.

9. What is the principle of least privilege in authorization?

10. True or False: Authorization can occur without prior authentication.

11. What is the primary purpose of authentication?

12. Which protocol is commonly used for secure authentication over networks?

13. What is a common vulnerability in password-based authentication?

14. True or False: A user with authentication credentials automatically has authorization to all system resources.

15. Role-based access control (RBAC) grants permissions based on ____.

16. Which authentication factor is 'something you are'?

17. What does multi-factor authentication (MFA) require?

18. True or False: Authentication and authorization serve the same security purpose.

19. Authorization determines ____.

20. Which of the following is an example of something you know for authentication?