An organization is implementing MFA for its VPN. They currently use a password and a TOTP app. They want to add a third factor that is an inherence factor. Which of the following should they add?

A second TOTP app on a different device

A company wants to implement MFA for its remote workforce. The IT team is considering using biometric authentication as one factor. Which of the following is a primary disadvantage of using biometrics in this context?

Biometrics are less secure than passwords

Biometric data cannot be changed if compromised

Biometrics can be easily shared between users

Biometrics require no additional hardware

A government agency handles classified documents. The security policy requires that access to each document be determined by comparing the document's classification label (e.g., Confidential, Secret) with the user's security clearance. Users cannot override these decisions. Which access control model is most appropriate?

Discretionary Access Control (DAC)

Role-Based Access Control (RBAC)

Attribute-Based Access Control (ABAC)

A user logs into a system by entering their username 'jsmith' and then providing a password. The system verifies the password and then checks whether 'jsmith' has permission to access the HR database. Which sequence of security controls is being performed?

Authentication, identification, authorization

Identification, authorization, authentication

Authorization, authentication, identification

Identification, authentication, authorization

In the context of the security control process, what is the primary role of identification?

To verify that the user is who they claim to be

To determine what resources the user can access

To declare or claim an identity to the system

To record the user's actions for audit purposes

EC-CouncilCertified Cybersecurity Technician

Domain 2Objective 1

Identification, Authentication, and Authorization CCT Practice Questions (Page 7)

Part of the Identity and Network Security Controls domain, which makes up ~20% of our current practice bank.

48questions here

10free pages

8concepts

Questions 31–35

31application · easy
An organization is implementing MFA for its VPN. They currently use a password and a TOTP app. They want to add a third factor that is an inherence factor. Which of the following should they add?
Select an answer first
32application · medium
A company wants to implement MFA for its remote workforce. The IT team is considering using biometric authentication as one factor. Which of the following is a primary disadvantage of using biometrics in this context?
Select an answer first
33application · medium
A government agency handles classified documents. The security policy requires that access to each document be determined by comparing the document's classification label (e.g., Confidential, Secret) with the user's security clearance. Users cannot override these decisions. Which access control model is most appropriate?
Select an answer first
34application · easy
A user logs into a system by entering their username 'jsmith' and then providing a password. The system verifies the password and then checks whether 'jsmith' has permission to access the HR database. Which sequence of security controls is being performed?
Select an answer first
35foundation · easy
In the context of the security control process, what is the primary role of identification?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CCT” is a trademark of its owner, used for identification only.