ITF+ Authentication Factors and Access Control Basics

1. What is the primary advantage of implementing MFA in an organization?

Eliminates the need for passwords

Significantly increases security by requiring multiple verification methods

Reduces IT support costs

Prevents all cyber attacks

2. Which of the following best describes conditional access policies?

Policies that grant access based only on user roles

Policies that grant or deny access based on conditions like location and device

Policies that eliminate the need for authentication

Policies that apply equally to all users

3. Discretionary Access Control (DAC) allows resource owners to decide who can access their resources. True or False?

True

False

4. Which statement best describes the principle of least privilege?

Grant all users full system access

Users receive only the minimum permissions needed for their role

Administrators have no restrictions

Permissions should never be revoked

Submit

8. Mandatory Access Control (MAC) allows users to grant permissions to others. True or False?

True

False

9. Single Sign-On (SSO) allows users to authenticate once and access multiple systems. True or False?

True

False

10. Which access control model is most suitable for complex environments with many dynamic attributes?

Discretionary Access Control (DAC)

Mandatory Access Control (MAC)

Role-Based Access Control (RBAC)

Attribute-Based Access Control (ABAC)

11. Which of the following is NOT considered a valid authentication factor?

Something you know (password)

Something you have (smart card)

Something you are (biometric)

Something you like (favorite color)

12. A password is classified as which authentication factor?

Something you have

Something you are

Something you know

Something you do

13. Attribute-Based Access Control (ABAC) makes decisions based on what?

Only user roles

Attributes of users, resources, and environment

Only resource location

Only time of access

14. What does LDAP primarily provide in directory services?

Encryption protocols

User authentication and centralized directory access

Firewall rules

Data backup solutions

15. Which of the following is an example of a 'something you have' authentication factor?

Fingerprint scan

PIN code

USB security key

Retinal scan

16. A biometric authentication factor falls under which category?

Something you know

Something you have

Something you are

Something you do

17. Role-Based Access Control (RBAC) grants permissions based on what?

User's physical location

User's assigned role or job function

Device IP address

Time of day

18. Which authentication method uses a time-based code that expires after 30 seconds?

TOTP (Time-based One-Time Password)

Static password

Security question

Username and password

19. What is the primary purpose of access control?

Encrypt all network traffic

Determine who can access resources and what actions they can perform

Monitor all user activities

Prevent all internet connections

20. Multi-factor authentication (MFA) requires at least how many different authentication factors?

One

Two

Three

Four

ITF+ Authentication Factors and Access Control Basics Quiz

1. What is the primary advantage of implementing MFA in an organization?

2.

What first name or nickname would you like us to use?

2. Which of the following best describes conditional access policies?

3. Discretionary Access Control (DAC) allows resource owners to decide who can access their resources. True or False?

4. Which statement best describes the principle of least privilege?

5. The process of verifying that a user is who they claim to be is called ____.

6. A ____ is a portable device that generates one-time codes for authentication.

7. An authentication server that validates user credentials in a network is typically called a ____ server.

8. Mandatory Access Control (MAC) allows users to grant permissions to others. True or False?

9. Single Sign-On (SSO) allows users to authenticate once and access multiple systems. True or False?

10. Which access control model is most suitable for complex environments with many dynamic attributes?

11. Which of the following is NOT considered a valid authentication factor?

12. A password is classified as which authentication factor?

13. Attribute-Based Access Control (ABAC) makes decisions based on what?

14. What does LDAP primarily provide in directory services?

15. Which of the following is an example of a 'something you have' authentication factor?

16. A biometric authentication factor falls under which category?

17. Role-Based Access Control (RBAC) grants permissions based on what?

18. Which authentication method uses a time-based code that expires after 30 seconds?

19. What is the primary purpose of access control?

20. Multi-factor authentication (MFA) requires at least how many different authentication factors?