Explain Access Management Principles 100-160 Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A company uses a RADIUS server for Wi-Fi authentication. Employees log in with a username and password, and the RADIUS server logs every successful and failed login attempt. Recently, a user's credentials were compromised, and the security team wants to add an additional verification step without changing the existing RADIUS infrastructure. Which action best meets this requirement?

   • AIncrease the password expiration frequency from 90 days to 30 days.
   • BDisable Wi-Fi access for the affected user until the password is reset.
   • CMove authentication to a local database on each access point to avoid RADIUS dependency.
   • DConfigure the RADIUS server to require a one-time passcode from an authenticator app in addition to the password.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A company's network administrator wants to enforce a policy that only users who have both a valid Active Directory account and a one-time passcode from a hardware token can access the corporate Wi-Fi. The solution must also record each login attempt for audit purposes. Which approach meets all these requirements?

   • AConfigure a RADIUS server that authenticates users against Active Directory and requires a token code, then forwards accounting data to the wireless controller.
   • BUse a VPN concentrator with certificate-based authentication and RADIUS accounting, bypassing the wireless controller.
   • CSet up the wireless controller to authenticate users against Active Directory and enable local logging on the controller.
   • DDeploy a standalone token server that issues passcodes and stores authentication logs, without integrating with the wireless network.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A company wants to ensure that only employees in the 'Finance' group can access the accounting application, and that all access attempts are recorded for compliance. The application currently uses local accounts. Which change would best achieve both objectives?

   • AKeep local accounts but add a password expiration policy.
   • BUse a RADIUS server for authentication but do not configure authorization.
   • CIntegrate the application with a centralized identity provider that enforces group membership and logs all authentication events.
   • DEnable MFA for all local accounts.
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A company is deploying a RADIUS server for Wi-Fi authentication. The security team wants to ensure that if the RADIUS server fails, users can still authenticate, but with reduced functionality. Which approach best meets this requirement?

   • ADisable Wi-Fi access entirely if the RADIUS server is unavailable.
   • BConfigure the access points to fall back to a local user database with full authorization rules.
   • CUse a single RADIUS server and accept the risk of downtime.
   • DConfigure a secondary RADIUS server that provides authentication but does not enforce group-based authorization.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A hospital uses a RADIUS server for Wi-Fi access. Clinicians authenticate with a smart card and a PIN. The security team wants to add an additional factor to protect against stolen smart cards. Which option adds a factor that is different from the existing two?

   • ARequire users to insert the smart card into a different card reader.
   • BRequire a biometric fingerprint scan in addition to the smart card and PIN.
   • CRequire a longer PIN with at least 8 digits.
   • DRequire users to confirm their identity by answering a security question.
   Reveal Solution Discussion Select an answer first