Authentication & Security Protocols (Core 2)

Which AAA (Authentication, Authorization, and Accounting) protocol was developed by Cisco?

TACACS+

Which AAA protocol encrypts the entire authentication packet?

TACACS+

Which AAA protocol only encrypts the user's password during authentication?

RADIUS

Which AAA protocol is the standard for network authentication used by many ISPs and VPNs?

RADIUS

A company wants to centralize authentication for VPN users. Which protocol is MOST commonly used?

RADIUS

Which protocol is MOST commonly used by network devices such as routers and switches for administrator authentication?

TACACS+

Which authentication protocol is used by Microsoft Active Directory to securely authenticate users using tickets?

Kerberos

What is the primary advantage of Kerberos over older authentication protocols?

Mutual authentication using encrypted tickets, reducing the risk of password interception.

Which directory service protocol allows users and applications to query information stored in Active Directory?

LDAP

What does LDAP stand for?

Lightweight Directory Access Protocol

A company wants employees to log in once and automatically access multiple applications without logging in again. What technology should be implemented?

Single Sign-On (SSO)

What does SSO stand for?

Single Sign-On

What is the primary benefit of Single Sign-On (SSO)?

Users authenticate once and gain access to multiple systems without repeated logins.

Which authentication factor is represented by a password?

Something you know

Which authentication factor is represented by a fingerprint?

Something you are

Which AAA (Authentication, Authorization, and Accounting) protocol was developed by Cisco?

TACACS+

Which authentication factor is represented by a smart card?

Something you have

A user logs in with a password and then enters a six-digit code from their phone. What security feature is being used?

Multi-Factor Authentication (MFA)

What does MFA stand for?

Multi-Factor Authentication

Why is Multi-Factor Authentication (MFA) more secure than using only a password?

Because it requires two or more independent authentication factors, making stolen passwords alone insufficient.

Which authentication method requires two different authentication factors before granting access?

Multi-Factor Authentication (MFA)

A company issues employees smart cards that must be inserted before logging in. Which authentication factor does this represent?

Something you have

A company installs fingerprint scanners on all employee laptops. Which authentication factor is being used?

Something you are

A company requires employees to enter a PIN before accessing a secure building. Which authentication factor is this?

Something you know

Which authentication protocol sends usernames and passwords in plain text and should never be used unless protected by encryption?

PAP (Password Authentication Protocol)

Which authentication protocol is more secure than PAP because it uses a challenge-response mechanism?

CHAP (Challenge Handshake Authentication Protocol)

Which Microsoft authentication protocol improves upon CHAP for Windows environments?

MS-CHAP

Which Microsoft authentication protocol is commonly used with VPN authentication?

MS-CHAPv2

Which legacy Windows authentication protocol has largely been replaced by Kerberos?

NTLM

Which authentication protocol is preferred over NTLM in modern Windows domains?

Kerberos

A web application allows users to log in with their Google account. Which authorization framework is MOST likely being used?

OAuth

What is OAuth primarily used for?

Allowing third-party applications to access resources without sharing the user's password.

A company wants employees to use Microsoft credentials to access a cloud application. Which standard is commonly used?

SAML

What does SAML stand for?

Security Assertion Markup Language

What is the primary purpose of SAML?

Providing Single Sign-On (SSO) between organizations and cloud services.

A user accesses Salesforce using their Microsoft 365 login without creating a separate account. Which technology is MOST likely being used?

SAML

Which protocol is MOST commonly associated with cloud-based Single Sign-On?

SAML

A network administrator wants to verify a user's identity before granting network access. Which part of AAA is being performed?

Authentication

A network administrator determines which files a user can access after they log in. Which part of AAA is this?

Authorization

A company records the time users log in, log out, and which resources they accessed. Which part of AAA is this?

Accounting

What do the three A's in AAA stand for?

Authentication, Authorization, and Accounting

Which protocol would you choose for administrator authentication on Cisco routers?

TACACS+

Which protocol would you choose for authenticating Wi-Fi users through a RADIUS server?

RADIUS

Which protocol is responsible for storing and organizing directory information in Active Directory?

LDAP

Which protocol uses encrypted tickets to verify a user's identity without repeatedly transmitting passwords?

Kerberos

A user authenticates to Active Directory and then accesses network resources without entering another password. Which authentication protocol made this possible?

Kerberos

A company wants the most secure authentication method available for employees. Which should be implemented?

Multi-Factor Authentication (MFA)

Which biometric authentication method is generally considered more secure than facial recognition?

Iris scan

Which biometric authentication method analyzes the unique patterns inside a person's eye?

Iris scan

Which biometric authentication method measures the shape and geometry of a person's hand?

Hand geometry

Which biometric authentication method scans the unique ridges of a finger?

Fingerprint recognition