What is NOT an example of "something a user has" in the context of multi-factor authentication?

What form of security threat is he facing in the following situation?
You've just gotten a phone call from a customer who is preparing to fill out the information on the Internet demanding personal account numbers and bank information. He claims he received an email from his bank warning him that his credit card information might have been stolen as a result of a security breach revealed by a large hotel chain. He was directed to an official-looking website that requested bank information and account numbers.

phishing

Criminals frequently employ phishing schemes to gain sensitive user information. A phishing scam generally starts with someone or something imitating a trustworthy entity in some type of electronic communication.

Suppose the user is an impostor, what form of fraudulent activity is she using to obtain access to the system while working on the help desk, you receive a phone call from a user who frantically tells you she can’t log in to her account as she has forgotten her password?

social engineering

Social engineering is the practice of attempting to acquire access to a company's network or facility by influencing employees inside the business. Finding out information about workers by checking up their names, pets' names, and particular hobbies, and then utilizing that knowledge to guess passwords is one example of this.

"WEP is a strong security protocol that should be used to secure wireless networks" is true or false

False

An out-of-date wireless security protocol is Wired Equivalent Privacy (WEP) which has been surpassed by WPA and WPA2, which are more secure choices (WPA2 should be used when possible). There have been several successful assaults to get access to WEP-based wireless networks.

To apply for default user account permissions, what Active Directory feature can be used?

Group Policy

A Group Policy in Microsoft Active Directory is a policy that applies to a large number of AD objects. Objects include user accounts, servers, desktop devices, and so on. Group Policies are used to govern user account rights, for example. For example, a policy might be written for each team that specifies the default account rights required for those people.

What is this known as when Jamie enters the corporate headquarters of his firm, he must pass through a tiny space with two closed doors; after entering through the first door, it will lock behind Jamie, and he will need to produce identification to access via the second door?

a mantrap

A mantrap is a type of trap intended to prevent infiltration techniques like tailgating and piggybacking. A mantrap is a tiny enclosed space with two lockable doors that separate the outside world from a safe location. A person will enter via the first door, but that door must be closed behind them before the second door may be opened.

To establish a VPN across the Internet which technologies can be used?

PPTP

To establish a VPN (Virtual Private Network) across the Internet, PPTP (Point to Point Tunneling Protocol) is used. This is usually used with other security measures to improve its security, as it is generally considered vulnerable on its own.

What is an administrator going to do if she needs more security than is provided by a login and password on her mobile devices and wants to add an additional layer of security?

by adding multi-factor authentication

Multi-factor authentication provides an additional degree of security to a basic login and password. This might be biometrics, the usage of a token, or even a call-back phone number.

Margaret unlocks her iPhone using only her fingerprint. What type of authentication is this?

biometric authentication

Biometric authentication is a popular way of protecting mobile devices. Face scans, fingerprint locks, and retina scanners are examples of biometrics.

Which option will provide the highest levels of security while configuring a WAP you are prompted to choose between WPA2-AES and WPA2-TKIP if you are a network engineer tasked with configuring a new WLAN for your employer?

AES

Wireless defended connect to 2 (WPA2) is a protocol used to defend wireless networks. When WPA2-AES is available, it should be chosen since the Advanced Encryption Standard AES provides far better and more defend encryption than the earlier Temporal Key Integrity Protocol (TKIP).

Which kind of authentication in the case that Margaret unlocks her iPhone using only her fingerprint?

biometric authentication

A typical way for securing mobile devices is biometric authentication. Face scans, fingerprint locks, and retina scanners are examples of biometrics.

What can Jenny look for on the site to ensure that it’s a trusted website that Jenny is nervous that a website she is accessing is not a trusted website?

a digital certificate

Users can use digital certificates to determine whether they are visiting a trusted website. A trusted certificate authority signs digital certificates (CA). The CA can confirm that the public key obtained from a website is from the web server and not from an attacker.

Which of these is a type of social engineering in which an unauthorized individual gets entrance to a controlled location by following someone who has legitimate access?

tailgating

Tailgating is the practice of following someone who does have access to an otherwise secure location. The other solutions are security concerns, but they do not alleviate the issue.

What steps should you take to protect these settings in the situation that you are a system administrator for a high school and responsible for five student computer labs and you need to prevent students from accessing the system BIOS on the machines?

Assign a password to the system BIOS.

It is beneficial to assign a BIOS password to all systems. Because BIOS passwords are conveniently circumvented by students with access to the system, you should also think about locking covers or situation alarms for lab systems. Expecting lab technicians to watch systems or installing security cameras would be prohibitively expensive, and the password would not necessarily be as secure. Obviously, removing the BIOS battery would never work.

What is NOT an example of "something a user has" in the context of multi-factor authentication?

Leave a Reply Cancel reply