What is the role of a certificate authority (CA) in certificate-based authentication?

To generate the user's private key

To issue and digitally sign digital certificates

A company is moving away from SMS-based one-time passwords because of SIM-swapping attacks. They want a solution that generates codes on a device the user possesses and does not require network connectivity. Which solution should they choose?

Software authenticator app that uses push notifications

Hardware token that generates time-based one-time passwords (TOTP)

What is a characteristic of a hardware token that generates one-time passwords (OTPs)?

It stores the user's password for automatic login

It requires a physical connection to the computer

It is synchronized with the authentication server using time or counter values

It is only used for offline authentication

In biometric authentication, what is the 'enrollment' process?

The process of verifying a user's identity during login

The process of updating the biometric system's software

The initial capture and storage of a user's biometric sample

The process of revoking a user's biometric access

Certified Information Systems Security Professional

Domain 5Objective 6

5.6 - Implement Authentication Systems CISSP Practice Questions (Page 5)

Part of the Identity and Access Management (IAM) domain, which accounts for 13% of the CISSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~9–16 in this domain), expect 2–3 from this objective — we provide 25 practice questions to prepare you well beyond it. (estimate)

25questions here

5free pages

11concepts

13%of the exam

Questions 21–25

21foundation · easy
What is the role of a certificate authority (CA) in certificate-based authentication?
Select an answer first
22application · medium
A company is moving away from SMS-based one-time passwords because of SIM-swapping attacks. They want a solution that generates codes on a device the user possesses and does not require network connectivity. Which solution should they choose?
Select an answer first
23foundation · easy
What is a characteristic of a hardware token that generates one-time passwords (OTPs)?
Select an answer first
24foundation · easy
Which component of AAA is responsible for tracking user activity and resource usage?
Select an answer first
25foundation · easy
In biometric authentication, what is the 'enrollment' process?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CISSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CISSP” is a trademark of its owner, used for identification only.