Access Control

The three bases of authentication are something you:

Why is 'something you know' (passwords) more popular than the other bases?

The secure way to store passwords is to store:

A random value added to a password before hashing, to defeat dictionary attacks, is a:

In multilevel security, clearances apply to ___ and classifications apply to ___:

An Access Control List (ACL) stores the access-control matrix by:

Two 8-bit iris codes differ in 2 of the 8 compared bits. What is the Hamming distance, and is it accepted as a match?

A communication path not intended as such by the system's designers is a:

CAPTCHA is primarily used for:

Which intrusion-detection approach can ONLY detect known attacks?

Authentication asks 'who goes there?' while authorization asks 'are you allowed to do that?'

Simply encrypting the password file fully solves the storage problem.

A salt must be kept secret.

An ideal biometric is universal, distinguishing, permanent, and collectable.

A dynamic token has a value that changes, such as SecurID.

Two-factor authentication requires any two of the three bases.

Hand geometry is unique to each person and ideal for identification.

In iris matching, a perfect match has a Hamming distance of 0.

Anomaly detection should be used entirely on its own.

Signature detection can detect brand-new, previously unknown attacks.

Match each authentication basis with an example.

Match each password-security concept.

Match each token class.

Match each authorization / MLS concept.

Match each detection / access concept.