A company is evaluating biometric authentication for employee access to a high-security lab. What is a primary disadvantage of using biometrics?

Biometrics require a smart card.

Biometrics are slower than passwords.

Biometrics cannot be changed if compromised.

A security team is designing a password policy. They want to prevent brute-force attacks while minimizing user frustration. Which policy is most effective?

Require 16-character passwords and force a change every 30 days.

Require 10-character passwords and allow unlimited login attempts.

Require 8-character passwords with complexity and no lockout.

Require 12-character passwords and implement account lockout after 5 failed attempts.

A company partners with another organization and wants its employees to access the partner's cloud application using their existing corporate credentials. Which approach is most appropriate?

Use SSO only within the company's internal network.

Set up federated identity management between the two organizations.

Share the corporate password database with the partner.

Create separate accounts for each employee in the partner's application.

LPI Security Essentials

Domain 5Objective 1

025.1 Identity and Authentication (weight: 3) SECURITY-ESSENTIALS Practice Questions (Page 2)

Part of the 025 Identity and Privacy domain, which makes up ~22% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 60-minute exam (~25–40 total, ~6–9 in this domain), expect 2–3 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

9concepts

Questions 6–10

6foundation · easy
What is the process of creating a user account and granting initial access rights called?
Select an answer first
7application · medium
A company is evaluating biometric authentication for employee access to a high-security lab. What is a primary disadvantage of using biometrics?
Select an answer first
8expert · hard
A company wants to implement SSO for both internal applications and external cloud services. They need a protocol that supports both web-based and mobile applications. Which protocol is most suitable?
Select an answer first
9expert · hard
A security team is designing a password policy. They want to prevent brute-force attacks while minimizing user frustration. Which policy is most effective?
Select an answer first
10application · medium
A company partners with another organization and wants its employees to access the partner's cloud application using their existing corporate credentials. Which approach is most appropriate?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SECURITY-ESSENTIALS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “SECURITY-ESSENTIALS” is a trademark of its owner, used for identification only.

025.1 Identity and Authentication (weight: 3) SECURITY-ESSENTIALS Practice Questions (Page 2)

Questions 6–10

What is the process of creating a user account and granting initial access rights called?

A company is evaluating biometric authentication for employee access to a high-security lab. What is a primary disadvantage of using biometrics?

A company wants to implement SSO for both internal applications and external cloud services. They need a protocol that supports both web-based and mobile applications. Which protocol is most suitable?

A security team is designing a password policy. They want to prevent brute-force attacks while minimizing user frustration. Which policy is most effective?

A company partners with another organization and wants its employees to access the partner's cloud application using their existing corporate credentials. Which approach is most appropriate?

Keep studying — 025 Identity and Privacy