Please keep at least one language enabled. || కనీసం ఒక భాషను ఎంచుకోండి.
Question 1
ప్రశ్న 1
What is authentication in computer security?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• Authentication establishes confidence that an entity is the identity it claims to be.
• A user may prove that identity by demonstrating control of one or more authenticators.
• Authentication is distinct from authorization, which concerns what an authenticated entity is permitted to access or perform.
• A user may prove that identity by demonstrating control of one or more authenticators.
• Authentication is distinct from authorization, which concerns what an authenticated entity is permitted to access or perform.
వివరణ:
Question 2
ప్రశ్న 2
Which statement correctly distinguishes authentication from authorization?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• Authentication answers the question of whether the claimant can prove the asserted identity.
• Authorization concerns the rights or permissions granted to an authenticated or otherwise identified entity.
• A user can therefore authenticate successfully yet still be denied access to a resource for which that user lacks authorization.
• Authorization concerns the rights or permissions granted to an authenticated or otherwise identified entity.
• A user can therefore authenticate successfully yet still be denied access to a resource for which that user lacks authorization.
వివరణ:
Question 3
ప్రశ్న 3
A password or PIN belongs to which traditional authentication-factor category?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• Passwords, passphrases and PINs are memorized secrets.
• They belong to the 'something you know' authentication-factor category.
• Possession tokens and biometric characteristics belong to different factor categories.
• They belong to the 'something you know' authentication-factor category.
• Possession tokens and biometric characteristics belong to different factor categories.
వివరణ:
Question 4
ప్రశ్న 4
A user authenticates with a cryptographic smart card that must be physically possessed by the user. Which authentication-factor category does the card primarily represent?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• A smart card or cryptographic token is a possession-based authenticator.
• It therefore represents the 'something you have' factor.
• A PIN used with the card would represent a separate knowledge factor.
• It therefore represents the 'something you have' factor.
• A PIN used with the card would represent a separate knowledge factor.
వివరణ:
Question 5
ప్రశ్న 5
A fingerprint used as an authentication factor belongs to which category?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• Fingerprints are biometric characteristics associated with the individual.
• Biometrics are categorized as the 'something you are' authentication factor.
• Passwords represent knowledge factors, while physical tokens represent possession factors.
• Biometrics are categorized as the 'something you are' authentication factor.
• Passwords represent knowledge factors, while physical tokens represent possession factors.
వివరణ:
Question 6
ప్రశ్న 6
During a login, an employee first enters the username 'ASI1842' and then enters a secret password. Which statement most accurately describes these two values?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• A username normally indicates which account or identity the claimant is asserting.
• A secret password provides authentication evidence associated with that account.
• Merely knowing or entering an account identifier does not by itself establish successful authentication.
• A secret password provides authentication evidence associated with that account.
• Merely knowing or entering an account identifier does not by itself establish successful authentication.
వివరణ:
Question 7
ప్రశ్న 7
A system requires a user to enter both a password and a separate PIN, with both values memorized by the user. Under the standard authentication-factor classification, which statement is correct?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• Both passwords and PINs are knowledge-based authentication factors.
• Multi-factor authentication requires more than one distinct factor type, not merely multiple secrets from the same factor category.
• Therefore a password plus another memorized PIN does not by itself provide two distinct authentication factors.
• Multi-factor authentication requires more than one distinct factor type, not merely multiple secrets from the same factor category.
• Therefore a password plus another memorized PIN does not by itself provide two distinct authentication factors.
వివరణ:
Question 8
ప్రశ్న 8
Which combination is a clear example of multi-factor authentication using two different factor categories?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• A password represents 'something you know'.
• A cryptographic security token represents 'something you have'.
• Because the two mechanisms use different authentication-factor categories, their combination can provide multi-factor authentication.
• A cryptographic security token represents 'something you have'.
• Because the two mechanisms use different authentication-factor categories, their combination can provide multi-factor authentication.
వివరణ:
Question 9
ప్రశ్న 9
Under NIST digital-identity terminology, which description best defines a credential?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• In NIST digital-identity terminology, a credential binds an identity to one or more authenticators.
• It can also contain or bind additional attributes relating to that identity.
• A credential is therefore conceptually different from an ordinary data file or firewall rule.
• It can also contain or bind additional attributes relating to that identity.
• A credential is therefore conceptually different from an ordinary data file or firewall rule.
వివరణ:
Question 10
ప్రశ్న 10
In an authentication protocol, what is the primary role of the verifier?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• The verifier evaluates the authentication evidence presented by the claimant.
• It confirms possession and control of the required authenticator or authenticators through the authentication protocol.
• The verifier may also need to confirm that the authenticator is correctly bound to the relevant subscriber account.
• It confirms possession and control of the required authenticator or authenticators through the authentication protocol.
• The verifier may also need to confirm that the authenticator is correctly bound to the relevant subscriber account.
వివరణ:
Question 11
ప్రశ్న 11
What is the defining characteristic of a one-time passcode (OTP) used for authentication?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• An OTP is an authenticator output intended for one-time authentication use.
• Preventing successful reuse of the same OTP helps limit replay of previously used passcodes.
• OTP mechanisms differ from ordinary static passwords that may remain valid across multiple authentication events.
• Preventing successful reuse of the same OTP helps limit replay of previously used passcodes.
• OTP mechanisms differ from ordinary static passwords that may remain valid across multiple authentication events.
వివరణ:
Question 12
ప్రశ్న 12
What is the main security purpose of rate limiting repeated failed authentication attempts?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• Rate limiting restricts how rapidly repeated failed authentication attempts can be made.
• It helps reduce the effectiveness of online password-guessing and brute-force attempts.
• It is an authentication protection mechanism rather than a network-speed or privilege-assignment function.
• It helps reduce the effectiveness of online password-guessing and brute-force attempts.
• It is an authentication protection mechanism rather than a network-speed or privilege-assignment function.
వివరణ:
Question 13
ప్రశ్న 13
What is an Access Control List (ACL) in the context of access control?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• An ACL specifies which entities are permitted to access a resource and the applicable access rights.
• It is a mechanism for implementing access-control decisions on protected resources.
• Authentication may establish identity first, while the ACL can then contribute to determining whether the requested access is authorized.
• It is a mechanism for implementing access-control decisions on protected resources.
• Authentication may establish identity first, while the ACL can then contribute to determining whether the requested access is authorized.
వివరణ:
Question 14
ప్రశ్న 14
Which access-control principle states that users and processes should receive only the minimum permissions and resources necessary to perform their assigned tasks?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• Least privilege restricts entities to the minimum authorizations and resources necessary for their functions.
• It reduces unnecessary access to sensitive information or system capabilities.
• Granting every user administrator-level access would directly conflict with this principle.
• It reduces unnecessary access to sensitive information or system capabilities.
• Granting every user administrator-level access would directly conflict with this principle.
వివరణ:
Question 15
ప్రశ్న 15
A user successfully proves identity with valid authentication credentials but is denied permission to delete a protected evidence file. Which security concept most directly explains the denial?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• Successful authentication establishes the user's identity for the session.
• It does not automatically grant permission to perform every possible operation.
• Authorization or access control determines whether that authenticated user has permission to delete the protected file.
• It does not automatically grant permission to perform every possible operation.
• Authorization or access control determines whether that authenticated user has permission to delete the protected file.
వివరణ:
Question 16
ప్రశ్న 16
For centrally verified passwords, which storage approach is designed to make recovery of the original passwords from a stolen verifier database more difficult?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• Modern password verifiers should protect stored password representations against offline attacks.
• NIST specifies storing centrally verified passwords using a suitable salted password-hashing scheme.
• Storing plaintext passwords would expose the original secrets directly if the password database were compromised.
• NIST specifies storing centrally verified passwords using a suitable salted password-hashing scheme.
• Storing plaintext passwords would expose the original secrets directly if the password database were compromised.
వివరణ:
Question 17
ప్రశ్న 17
Consider the following statements about authentication factors:
1. A password is normally a 'something you know' factor.
2. A cryptographic token can provide a 'something you have' factor.
3. A fingerprint is a 'something you are' factor.
4. Two different passwords automatically represent two different factor categories.
Which statements are correct?
1. A password is normally a 'something you know' factor.
2. A cryptographic token can provide a 'something you have' factor.
3. A fingerprint is a 'something you are' factor.
4. Two different passwords automatically represent two different factor categories.
Which statements are correct?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• Statements 1, 2 and 3 correctly represent the three traditional authentication-factor categories.
• Statement 4 is false because two passwords are both knowledge factors.
• Multi-factor authentication requires distinct factor types rather than simply multiple authenticators from the same factor category.
• Statement 4 is false because two passwords are both knowledge factors.
• Multi-factor authentication requires distinct factor types rather than simply multiple authenticators from the same factor category.
వివరణ:
Question 18
ప్రశ్న 18
Assertion (A): Requiring both a password and a PIN does not necessarily provide multi-factor authentication.
Reason (R): A password and a PIN are both normally classified as 'something you know'.
Choose the correct answer.
Reason (R): A password and a PIN are both normally classified as 'something you know'.
Choose the correct answer.
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• Multi-factor authentication requires more than one distinct authentication-factor category.
• A password and PIN are both memorized secrets and therefore belong to the knowledge-factor category.
• Both statements are true, and the Reason correctly explains the Assertion.
• A password and PIN are both memorized secrets and therefore belong to the knowledge-factor category.
• Both statements are true, and the Reason correctly explains the Assertion.
వివరణ:
Question 19
ప్రశ్న 19
Match List I with List II:
List I
(a) Claimant
(b) Verifier
(c) Authenticator
(d) Authorization
List II
1. Right or permission granted to access a system resource
2. Entity whose identity is being proved
3. Something possessed and controlled that is used to authenticate an identity
4. Entity that confirms the claimant's identity through the authentication process
Choose the correct matching code.
List I
(a) Claimant
(b) Verifier
(c) Authenticator
(d) Authorization
List II
1. Right or permission granted to access a system resource
2. Entity whose identity is being proved
3. Something possessed and controlled that is used to authenticate an identity
4. Entity that confirms the claimant's identity through the authentication process
Choose the correct matching code.
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• The claimant is the entity attempting to prove an identity, giving (a)-2.
• The verifier checks the authentication evidence, giving (b)-4, while an authenticator is used to prove the identity claim, giving (c)-3.
• Authorization represents the right or permission to access a resource, giving (d)-1.
• The verifier checks the authentication evidence, giving (b)-4, while an authenticator is used to prove the identity claim, giving (c)-3.
• Authorization represents the right or permission to access a resource, giving (d)-1.
వివరణ:
Question 20
ప్రశ్న 20
In a Role-Based Access Control (RBAC) system, what primarily determines the permissions assigned to a user?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• Role-Based Access Control assigns permissions according to defined organizational roles or job functions.
• Users receive access appropriate to the roles to which they are assigned rather than receiving arbitrary unrestricted privileges.
• RBAC can support controlled administration and the principle of limiting access according to operational responsibilities.
• Users receive access appropriate to the roles to which they are assigned rather than receiving arbitrary unrestricted privileges.
• RBAC can support controlled administration and the principle of limiting access according to operational responsibilities.
వివరణ:
Answer Key సమాధానాల పట్టిక
-
Question 1 ప్రశ్న 1Answer: A. The process of verifying the claimed identity of a user, process or device సమాధానం: A.
-
Question 2 ప్రశ్న 2Answer: D. Authentication verifies an identity claim, while authorization determines what access or permissions are allowed. సమాధానం: D.
-
Question 3 ప్రశ్న 3Answer: B. Something you know సమాధానం: B.
-
Question 4 ప్రశ్న 4Answer: C. Something you have సమాధానం: C.
-
Question 5 ప్రశ్న 5Answer: C. Something you are సమాధానం: C.
-
Question 6 ప్రశ్న 6Answer: A. The username normally identifies the account being claimed, while the password is used as an authenticator to help verify that claim. సమాధానం: A.
-
Question 7 ప్రశ్న 7Answer: D. Both are 'something you know', so requiring both does not by itself constitute authentication with two distinct factors. సమాధానం: D.
-
Question 8 ప్రశ్న 8Answer: B. Password and cryptographic security token సమాధానం: B.
-
Question 9 ప్రశ్న 9Answer: D. An object or data structure that authoritatively binds an identity, and optionally attributes, to one or more authenticators associated with a subscriber సమాధానం: D.
-
Question 10 ప్రశ్న 10Answer: C. To confirm the claimant's identity by verifying possession and control of the required authenticator or authenticators సమాధానం: C.
-
Question 11 ప్రశ్న 11Answer: A. A particular OTP value is intended to be accepted for authentication only once. సమాధానం: A.
-
Question 12 ప్రశ్న 12Answer: B. To restrict the rate at which repeated authentication guesses can be attempted సమాధానం: B.
-
Question 13 ప్రశ్న 13Answer: B. A list that associates entities with the access rights they are permitted to have for a resource సమాధానం: B.
-
Question 14 ప్రశ్న 14Answer: D. Least privilege సమాధానం: D.
-
Question 15 ప్రశ్న 15Answer: C. Authorization or access control సమాధానం: C.
-
Question 16 ప్రశ్న 16Answer: A. Store passwords using an appropriate salted password-hashing scheme rather than storing plaintext passwords. సమాధానం: A.
-
Question 17 ప్రశ్న 17Answer: C. 1, 2 and 3 only సమాధానం: C.
-
Question 18 ప్రశ్న 18Answer: B. Both Assertion and Reason are true, and Reason is the correct explanation of Assertion. సమాధానం: B.
-
Question 19 ప్రశ్న 19Answer: D. (a)-2, (b)-4, (c)-3, (d)-1 సమాధానం: D.
-
Question 20 ప్రశ్న 20Answer: A. The role or job function assigned to the user సమాధానం: A.