🌍 All Study Guides 📊 Dashboard 📰 Blog 💡 About

Google IT Support Professional Certificate • STUDY MODE

AUTHENTICATION

QUESTION 1 OF 13

How is authentication different from authorization? Right on! Authentication is proving that an entity is who they claim to be, while authorization is determining whether or not that entity is permitted to access resources.

Authentication is identifying a resource; authorization is verifying access to an identity.

Authentication is verifying access to a resource; authorization is verifying an identity.

Authentication is verifying an identity; authorization is verifying access to a resource.Correct Answer

They're the same thing.

QUESTION 2 OF 13

What are some characteristics of a strong password? Check all that apply, You got it! A strong password should contain a mix of character types and cases, and should be relatively long -- at least eight characters, but preferably more.

Contains dictionary words

Includes numbers and special charactersCorrect Answer

Is at least eight characters longCorrect Answer

Is used across accounts and systems

QUESTION 3 OF 13

In a multi-factor authentication scheme, a password can be thought of as: Wohoo! Since a password is something you memorize, it's something you know when talking about multi-factor authentication schemes.

something you are.

something you know.Correct Answer

something you have.

something you use.

QUESTION 4 OF 13

What are some drawbacks to using biometrics for authentication? Check all that apply. That's exactly right! If a biometric characteristic, like your fingerprints, is compromised, your option for changing your "password" is to use a different finger. This makes "password" changes limited. Other biometrics, like iris scans, can't be changed if compromised. If biometric authentication material isn't handled securely, then identifying information about the individual can leak or be stolen.

There are potential privacy concerns.Correct Answer

Biometric authentication is much slower than alternatives.

Biometric authentication is difficult or impossible to change if compromised.Correct Answer

Biometrics are easy to share.

QUESTION 5 OF 13

In what way are U2F tokens more secure than OTP generators? Great job! With one-time-password generators, the one-time password along with the username and password can be stolen through phishing. On the flip side, U2F authentication is impossible to phish, given the public key cryptography design of the authentication protocol.

They can't be cloned.

They're password-protected.

They're cheaper.

They're resistant to phishing attacks.Correct Answer

QUESTION 6 OF 13

What elements of a certificate are inspected when a certificate is verified? Check all that apply. Yep! To verify a certificate, the period of validity must be checked, along with the signature of the signing certificate authority, to ensure that it's a trusted one.

Trust of the signatory CACorrect Answer

Certificate key size

"Not valid after" dateCorrect Answer

"Not valid before" dateCorrect Answer

QUESTION 7 OF 13

What is a CRL? Good job! CRL stands for "Certificate Revocation List." It's a list published by a CA, which contains certificates issued by the CA that are explicitly revoked, or made invalid.

Caramel Raspberry Lemon

Certificate Recording Language

Certificate Revocation ListCorrect Answer

Certified Recursive Listener

QUESTION 8 OF 13

What are the names of similar entities that a Directory server organizes entities into? Awesome! Directory servers have organizational units, or OUs, that are used to group similar entities.

Organizational UnitsCorrect Answer

Clusters

Groups

Trees

QUESTION 9 OF 13

True or false: The Network Access Server handles the actual authentication in a RADIUS scheme. Nice work! The Network Access Server only relays the authentication messages between the RADIUS server and the client; it doesn't make an authentication evaluation itself.

True

FalseCorrect Answer

QUESTION 10 OF 13

True or false: Clients authenticate directly against the RADIUS server. Correct! Clients don't actually interact directly with the RADIUS server; the authentication is relayed via the Network Access Server.

True

FalseCorrect Answer

QUESTION 11 OF 13

What does a Kerberos authentication server issue to a client that successfully authenticates? Exactly! Once authenticated, a Kerberos client receives a ticket-granting ticket from the authentication server. This TGT can then be presented to the ticket-granting service in order to be granted access to a resource.

A ticket-granting ticketCorrect Answer

An encryption key

A digital certificate

A master password

QUESTION 12 OF 13

What advantages does single sign-on offer? Check all that apply. You nailed it! SSO allows one set of credentials to be used to access various services across sites. This reduces the total number of credentials that might be otherwise needed. SSO authentication also issues an authentication token after a user authenticates using username and password. This token then automatically authenticates the user until the token expires. So, users don't need to reauthenticate multiple times throughout a work day.

It enforces multifactor authentication.

It reduces the total number of credentials,Correct Answer

It provides encrypted authentication.

It reduces time spent authenticating.Correct Answer

QUESTION 13 OF 13

What does OpenID provide? Yep! OpenID allows authentication to be delegated to a third-party authentication service.

Digital signatures

Cryptographic hashing

Certificate signing

Authentication delegationCorrect Answer

Ready to test your recall?

How is authentication different from authorization? Right on! Authentication is proving that an entity is who they claim to be, while authorization is determining whether or not that entity is permitted to access resources.

Authentication is identifying a resource; authorization is verifying access to an identity.

Authentication is verifying access to a resource; authorization is verifying an identity.

Authentication is verifying an identity; authorization is verifying access to a resource.

They're the same thing.

How confident are you in this answer?