Authentication Mechanisms and Authorization Systems NDE Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   A company is implementing Single Sign-On (SSO) for its employees. Which of the following is a primary benefit of SSO?

   • AUsers authenticate once and gain access to multiple applications
   • BIt eliminates the need for any authentication
   • CIt automatically grants all users access to all resources
   • DIt provides stronger encryption for all network traffic
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   What is the primary role of a directory service like LDAP or Active Directory?

   • ATo monitor network performance and generate alerts
   • BTo store and organize information about users and resources, and provide authentication and authorization services
   • CTo provide a firewall between internal and external networks
   • DTo encrypt all network traffic within an organization
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A company is implementing MFA for all users. The security team wants to avoid using SMS because of known vulnerabilities. They also want a solution that works offline and does not require users to install a third-party app. Which MFA method best fits these constraints?

   • AHardware OTP tokens that generate one-time passcodes.
   • BPush notifications to a mobile app.
   • CBiometric fingerprint scanning on the user's laptop.
   • DEmail-based one-time passcodes.
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A Linux administrator needs to configure a centralized authentication system for a fleet of servers. The requirement is to use a directory service that supports LDAP for authentication and allows for centralized user management. Which solution best meets this requirement?

   • ASamba as a standalone file server
   • BLocal /etc/passwd files on each server
   • COpenLDAP
   • DNIS (Network Information Service)
   Reveal Solution Discussion Select an answer first
6. 35expert · hard

   An organization uses Active Directory with RBAC. A user in the 'Sales' role can access the CRM application. The user is also a member of the 'Contractors' group, which is denied access to the CRM. The user reports they cannot access the CRM. What is the most likely reason?

   • AThe deny permission for the Contractors group overrides the allow permission from the Sales role.
   • BThe CRM application requires MFA, which the user has not configured.
   • CThe user's account is locked out.
   • DThe user's Sales role was removed by an administrator.
   Reveal Solution Discussion Select an answer first