Explain Access Management Principles 100-160 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   In the AAA framework, which component is responsible for determining what a successfully authenticated user is allowed to do?

   • AAccounting
   • BAuthentication
   • CAccess control list (ACL)
   • DAuthorization
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A company is deploying a new wireless network for employees and guests. Employees must use their corporate credentials plus MFA, while guests must use temporary credentials that expire after 24 hours. The company wants to use a single authentication infrastructure. Which solution best meets these requirements?

   • ADeploy a RADIUS server that connects to the corporate directory for employee authentication and maintains a separate guest account database with expiration policies.
   • BConfigure separate RADIUS servers for employees and guests.
   • CUse a captive portal that authenticates all users against a single local database.
   • DUse the same corporate directory for both employees and guests, with MFA required for all.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is the primary purpose of requiring a minimum password length in a password policy?

   • ATo make passwords easier for users to remember
   • BTo ensure passwords are unique for each user
   • CTo increase the number of possible password combinations, making brute-force attacks harder
   • DTo prevent users from writing passwords down
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A company wants to use a single RADIUS server to authenticate employees for both Wi-Fi and VPN access. The security team wants to apply different authorization policies: employees in the 'staff' group get full network access, while 'contractors' get limited access. Which RADIUS capability makes this possible?

   • ARADIUS can return authorization attributes that specify access permissions based on group membership.
   • BRADIUS requires a separate realm for each access type, so Wi-Fi and VPN need different servers.
   • CRADIUS can log all access but cannot differentiate between Wi-Fi and VPN sessions.
   • DRADIUS can only authenticate users, not authorize them, so separate servers are needed.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A company wants to allow employees to use their corporate credentials to access the guest Wi-Fi network, but only if they also provide a code from their mobile authenticator app. The network team wants to avoid configuring authentication on each access point individually. What should they implement?

   • AA local user database on each access point with MFA enabled.
   • BA VPN concentrator that uses certificates for authentication.
   • CA captive portal that asks for a username and password only.
   • DA RADIUS server that integrates with the corporate identity provider and the MFA service.
   Reveal Solution Discussion Select an answer first