Authentication and Authorization Fundamentals

1. Which of the following is an example of something you know for authentication?

Fingerprint

Password

Security token

Facial recognition

2. True or False: An access control list (ACL) specifies which users can access specific resources.

True

False

3. What does multi-factor authentication (MFA) require?

Multiple passwords from different accounts

Two or more different types of verification factors

Authentication from multiple administrators

Repeated login attempts within a time limit

4. What is a primary benefit of using certificate-based authentication?

It requires no password management

It provides strong mutual authentication between parties

It eliminates the need for encryption

It reduces network latency significantly

5. True or False: OAuth is primarily an authentication protocol rather than an authorization protocol.

True

False

6. Which of the following is a risk associated with storing passwords in plain text?

Faster login times

Unauthorized access if the database is compromised

Easier password recovery by administrators

Reduced storage requirements

7. What is a common vulnerability in password-based authentication?

Weak or reused passwords

Passwords are too long

Passwords use special characters

Passwords require frequent changes

8. Which protocol is commonly used for secure authentication over networks?

HTTP

HTTPS with TLS

FTP

Telnet

9. What is the principle of least privilege in authorization?

Grant users maximum access to simplify administration

Grant users only the minimum permissions needed for their role

Require users to request access for each resource

Deny all access by default and never grant exceptions

10. True or False: Authorization can occur without prior authentication.

True

False

Submit

12. What is the primary purpose of authentication?

Verify the identity of a user or system

Determine what resources a user can access

Encrypt data during transmission

Monitor network traffic for threats

Submit

14. True or False: A user with authentication credentials automatically has authorization to all system resources.

True

False

15. Which authentication factor is 'something you are'?

PIN code

Security question answer

Biometric identifier

Hardware token

16. True or False: Authentication and authorization serve the same security purpose.

True

False

Submit

General Security Beginner Authentication and Authorization Quiz

1. Which of the following is an example of something you know for authentication?

2.

What first name or nickname would you like us to use?

2. True or False: An access control list (ACL) specifies which users can access specific resources.

3. What does multi-factor authentication (MFA) require?

4. What is a primary benefit of using certificate-based authentication?

5. True or False: OAuth is primarily an authentication protocol rather than an authorization protocol.

6. Which of the following is a risk associated with storing passwords in plain text?

7. What is a common vulnerability in password-based authentication?

8. Which protocol is commonly used for secure authentication over networks?

9. What is the principle of least privilege in authorization?

10. True or False: Authorization can occur without prior authentication.

11. The practice of requiring users to change passwords regularly is intended to reduce ____ exposure.

12. What is the primary purpose of authentication?

13. A security token used for authentication is often called a ____.

14. True or False: A user with authentication credentials automatically has authorization to all system resources.

15. Which authentication factor is 'something you are'?

16. True or False: Authentication and authorization serve the same security purpose.

17. Single Sign-On (SSO) allows users to ____.

18. Role-based access control (RBAC) grants permissions based on ____.

19. Session tokens are used to maintain ____ after initial authentication.

20. Authorization determines ____.