Explain Access Management Principles 100-160 Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Which combination of authentication factors best describes multifactor authentication (MFA)?

   • AA password and a one-time code sent to a mobile device
   • BA username and a password
   • CA smart card and a security token
   • DA fingerprint and a facial scan
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A company is updating its password policy. The security team wants to prevent users from reusing their previous passwords and also reduce the risk of credential stuffing attacks. Which combination of policy elements best addresses both goals?

   • AEnforce a password history of 10 and require passwords to be at least 12 characters.
   • BRequire a complex password with special characters but allow immediate reuse of the previous password.
   • CRequire password changes every 15 days and allow reuse after 3 changes.
   • DSet a minimum password length of 6 characters and no history requirement.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   An organization uses a RADIUS server to authenticate remote workers connecting via VPN. The security team wants to ensure that only users in the 'remote-access' group can connect, and that all connection attempts are recorded for audit purposes. Which RADIUS feature set should be configured?

   • APassword expiration policies applied to all users in the RADIUS database.
   • BAccounting only, with no authentication or authorization rules.
   • CAuthentication only, using the RADIUS server's local user database.
   • DAuthorization rules that check group membership and accounting that logs connection events.
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A company uses a RADIUS server for Wi-Fi authentication. The security team wants to add MFA for all Wi-Fi users. The current RADIUS server does not support MFA natively. Which solution would allow MFA while keeping the existing RADIUS infrastructure?

   • AConfigure the access points to require a pre-shared key in addition to the RADIUS password.
   • BAsk users to change their passwords more frequently to compensate for the lack of MFA.
   • CReplace the RADIUS server with a local user database on each access point.
   • DPlace an MFA proxy or gateway between the access points and the RADIUS server that challenges users for a second factor.
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A hospital requires that only doctors can access patient records, and every access must be traceable to an individual. The system currently uses username/password authentication. Which combination of changes would best meet the traceability requirement?

   • AEnable MFA for all users and keep detailed audit logs of each session.
   • BUse role-based access control to grant doctors access to patient records.
   • CAssign each doctor a unique username and require password changes every 90 days.
   • DImplement a single sign-on system for all hospital applications.
   Reveal Solution Discussion Select an answer first