Examkin

Soru

Zorluk: OrtaPassword Security Policies, MFA, and Certificates

An organization is updating its enterprise security standards for administrative access and infrastructure security. Match each security control or PKI concept on the left to its corresponding operational function on the right.

  • Account Lockout ThresholdDefines the maximum allowed consecutive failed login attempts before an account is temporarily disabled to mitigate brute-force attacks.
  • Possession FactorVerifies identity using a physical or digital item held by the user, such as a hardware token generator or a smartphone TOTP application.
  • Certificate Signing Request (CSR)Contains an entity's public key and identity information, submitted to a Certificate Authority (CA) to request a signed digital certificate.
  • Certificate Revocation List (CRL)Provides a periodically published, signed list containing the serial numbers of digital certificates that are no longer valid.

Cevap

Account Lockout Threshold matches the control defining maximum failed attempts before disabling an account. Possession Factor matches identity verification using a physical or digital token. Certificate Signing Request (CSR) matches submitting a public key and identity info to a CA. Certificate Revocation List (CRL) matches the periodically published list of revoked certificate serial numbers.
The correct pairings accurately map security terms to their standard definitions. Account Lockout Threshold controls brute-force password attacks by disabling accounts after failed attempts. Possession Factor represents 'something you have' such as a TOTP token app. CSR represents the enrollment request payload sent to a CA containing the public key. CRL represents the list of invalidated certificate serial numbers published by a CA.

Adım Adım Çözüm

1
Analyze the password policy control mechanism.
Identify that Account Lockout Threshold limits failed login attempts to protect administrative accounts from brute-force attacks.
Password security policies enforce lockout rules after a predefined number of incorrect password attempts.
2
Categorize the multi-factor authentication element.
Map Possession Factor to tangible or digital objects like TOTP hardware tokens or smartphone apps.
MFA requires factors from distinct categories: Knowledge (something you know), Possession (something you have), and Inherence (something you are).
3
Evaluate PKI certificate enrollment components.
Match Certificate Signing Request (CSR) to the payload containing identity info and public key sent to a CA.
Endpoints must generate a local keypair and send a CSR to a Certificate Authority to obtain an X.509 certificate.
4
Evaluate PKI certificate revocation mechanisms.
Match Certificate Revocation List (CRL) to the signed file listing revoked certificate serial numbers.
CAs publish CRLs so relying parties can verify whether a certificate was invalidated prior to its scheduled expiration.

Anahtar Kavram

Password Security Policies, Multi-Factor Authentication (MFA) Factors, and Public Key Infrastructure (PKI) Certificate Components
Bu soruyu puanla

Konular

Password Security Policies, MFA, and Certificates

Bu konudan daha fazla soru