Identification, Authentication, and Authorization ECSS Practice Questions (Page 7)

Questions 31–35

1. 31expert · hard

   A hospital wants to implement biometric authentication for staff accessing patient records. The system must be accurate and fast, but the staff are concerned about privacy and the possibility of false rejections. Which biometric modality is generally considered to have a good balance of accuracy, speed, and user acceptance?

   • AVoice recognition
   • BFingerprint recognition
   • CRetina scanning
   • DSignature recognition
   Reveal Solution Discussion Select an answer first
2. 32application · easy

   An employee logs in to the corporate network once in the morning. Throughout the day, the employee accesses the email system, the HR portal, and the document management system without being prompted for credentials again. Which security concept is being demonstrated?

   • ASession hijacking
   • BMulti-factor authentication (MFA)
   • CSingle sign-on (SSO)
   • DFederated identity management
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A company wants to deploy an authentication mechanism that is resistant to shoulder surfing and does not require users to remember complex secrets. Which mechanism best meets these requirements?

   • AA security question
   • BA long, complex password
   • CBiometric authentication using a fingerprint scanner
   • DA PIN code
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   What is the defining characteristic of Multi-Factor Authentication (MFA)?

   • AIt requires two passwords for each login
   • BIt uses a single biometric factor for all users
   • CIt requires the user to change passwords frequently
   • DIt requires two or more authentication factors from different categories
   Reveal Solution Discussion Select an answer first
6. 35foundation · easy

   In a Single Sign-On (SSO) environment, what happens after a user successfully authenticates to the identity provider?

   • AThe user must authenticate again for each application
   • BThe user's password is sent to every application
   • CThe user is automatically granted administrative rights in all applications
   • DThe user is granted access to all connected applications without re-authenticating
   Reveal Solution Discussion Select an answer first