A company is implementing MFA for VPN access. The current solution requires a username, password, and a one-time code from a hardware token. The help desk reports that employees frequently forget their hardware tokens at home. Which change would reduce the reliance on a physical token while still maintaining MFA?

Replace the hardware token with a biometric factor such as a fingerprint scan

Remove the one-time code and rely only on the password

Send the one-time code via email instead of the hardware token

Allow users to choose a second password instead of the token

A company is considering implementing MFA for all users. The security team is concerned about user resistance and wants to choose a method that is both secure and convenient. Which combination of factors is generally considered both secure and convenient for end users?

Password and a security question

Biometric scan and a fingerprint

Password and a push notification to a registered smartphone

EC-CouncilCertified Cybersecurity Technician

Domain 2Objective 1

Identification, Authentication, and Authorization CCT Practice Questions (Page 3)

Part of the Identity and Network Security Controls domain, which makes up ~20% of our current practice bank.

48questions here

10free pages

8concepts

Questions 11–15

11application · medium
A company is implementing MFA for VPN access. The current solution requires a username, password, and a one-time code from a hardware token. The help desk reports that employees frequently forget their hardware tokens at home. Which change would reduce the reliance on a physical token while still maintaining MFA?
Select an answer first
12application · easy
After a user successfully authenticates, the system determines that the user has read-only access to the project repository. This decision is based on the user's role as a 'developer'. Which security control is being applied?
Select an answer first
13application · medium
A company is considering implementing MFA for all users. The security team is concerned about user resistance and wants to choose a method that is both secure and convenient. Which combination of factors is generally considered both secure and convenient for end users?
Select an answer first
14foundation · easy
A user enters their username into a login screen. Which security control step is being performed?
Select an answer first
15application · easy
A company is evaluating authentication methods for a high-security facility. They need a method that is difficult to forge and cannot be shared easily. Which method best meets this requirement?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CCT” is a trademark of its owner, used for identification only.

Identification, Authentication, and Authorization CCT Practice Questions (Page 3)

Questions 11–15

After a user successfully authenticates, the system determines that the user has read-only access to the project repository. This decision is based on the user's role as a 'developer'. Which security control is being applied?

A company is considering implementing MFA for all users. The security team is concerned about user resistance and wants to choose a method that is both secure and convenient. Which combination of factors is generally considered both secure and convenient for end users?

A user enters their username into a login screen. Which security control step is being performed?

A company is evaluating authentication methods for a high-security facility. They need a method that is difficult to forge and cannot be shared easily. Which method best meets this requirement?

Keep studying — Identity and Network Security Controls