Question: Each of the following accounts should be prohibited EXCEPT:

Answer: Priviledged accouts

Question: Which authentication factor is based on a unique talent that a user possesses?

Answer: What you do?

Question: How is key stretching effective in resisting password attacks?

Answer: It takes more time to generate candidate password digests

Question: Which human characteristic is NOT used for biometric identification?

Answer: Height

Question: Timur was making a presentation regarding how attacker’s break passwords. His presentation demonstrated the attack technique that is the slowest yet most thorough attack that is used against passwords. Which of these password attacks did he demonstrate?

Answer: Brute force attack

Question: Which of these is NOT a reason why users create weak passwords?

Answer: Most sites force users to create weak passwords even though they do not want to

Question: Which of these is a US Department of Defense smart card that is used for identification of active duty and reserve military personnel?

Answer: Common Access Card (CAC)

Question: Which of the following should NOT be stored in a secure password database?

Answer: Plaintext password

Question: A TOTP token code is generally valid for what period of time?

Answer: For as long as it appears on the device

Question: Creating a pattern of where a user accessed a remote web account is an example of which of the following?

Answer: Geolocation