Explain Access Management Principles 100-160 Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A remote employee uses a company laptop to access internal resources via VPN. The VPN currently requires only a username and password. The security team wants to add a second factor without requiring additional hardware. Which option best meets this requirement?

   • ASend a one-time code via SMS to the employee's phone.
   • BRequire the user to answer a set of personal security questions.
   • CUse the laptop's MAC address as a second factor.
   • DIntegrate the VPN with a RADIUS server that requires a one-time code from an authenticator app.
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   Which password policy element is primarily intended to limit the window of opportunity for an attacker who has stolen a password hash?

   • APassword history
   • BPassword expiration
   • CAccount lockout
   • DPassword complexity
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   In a RADIUS deployment, which device typically acts as the RADIUS client?

   • AThe user's laptop
   • BThe RADIUS server
   • CThe network access device, such as a switch or VPN gateway
   • DThe authentication database
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   Why does multifactor authentication (MFA) provide stronger security than a single password?

   • AIt makes passwords unnecessary for authentication
   • BIt eliminates the need for users to remember any passwords
   • CIt requires an attacker to compromise two or more different factor types, not just one credential
   • DIt prevents all phishing attacks
   Reveal Solution Discussion Select an answer first
6. 30expert · hard

   A company is implementing MFA for all remote access. The security team wants to use a method that does not require employees to carry a separate hardware token and is resistant to SIM-swapping attacks. Which MFA method best meets these criteria?

   • AA one-time code sent via SMS to the employee's phone.
   • BA biometric fingerprint scan on the employee's laptop.
   • CA hardware token that generates a one-time code.
   • DA time-based one-time password (TOTP) generated by an authenticator app on the employee's smartphone.
   Reveal Solution Discussion Select an answer first