A financial services company wants to authenticate remote employees accessing a high-security application. The security team is evaluating options and has these requirements: (1) the method must be resistant to phishing, (2) it must not require a physical device that can be lost, and (3) it should be relatively easy for users. Which authentication method best satisfies all three requirements?

Password with a security question

One-time passwords sent via SMS

Biometric authentication using a built-in fingerprint reader

What is a common weakness of password-based authentication?

Passwords are unique to each user

Passwords can be forgotten or stolen

Passwords require special hardware

Passwords are difficult to implement

A company is implementing an IAM solution. They want to enforce MFA for all administrative accounts and automatically deprovision access when an employee leaves. Which IAM capability is most directly responsible for ensuring that a departing employee's accounts are disabled promptly?

Privileged access management (PAM)

Which of the following is an example of multi-factor authentication?

Entering a username and password

Entering a password and then a one-time code sent to your phone

An online retailer wants to grant access to its partner portal based on the partner's location, the time of day, and the type of partnership agreement. Which access control model is best suited for this dynamic, attribute-based requirement?

Discretionary Access Control (DAC)

Attribute-Based Access Control (ABAC)

Role-Based Access Control (RBAC)

EC-CouncilCertified Cybersecurity Technician

Domain 2Objective 1

Identification, Authentication, and Authorization CCT Practice Questions (Page 9)

Part of the Identity and Network Security Controls domain, which makes up ~20% of our current practice bank.

48questions here

10free pages

8concepts

Questions 41–45

41application · medium
A financial services company wants to authenticate remote employees accessing a high-security application. The security team is evaluating options and has these requirements: (1) the method must be resistant to phishing, (2) it must not require a physical device that can be lost, and (3) it should be relatively easy for users. Which authentication method best satisfies all three requirements?
Select an answer first
42foundation · easy
What is a common weakness of password-based authentication?
Select an answer first
43application · medium
A company is implementing an IAM solution. They want to enforce MFA for all administrative accounts and automatically deprovision access when an employee leaves. Which IAM capability is most directly responsible for ensuring that a departing employee's accounts are disabled promptly?
Select an answer first
44foundation · easy
Which of the following is an example of multi-factor authentication?
Select an answer first
45application · medium
An online retailer wants to grant access to its partner portal based on the partner's location, the time of day, and the type of partnership agreement. Which access control model is best suited for this dynamic, attribute-based requirement?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CCT” is a trademark of its owner, used for identification only.