2 cissp ® Official Study Guide Eighth Edition

A.
Account ID
B.
Biometrics
C.
Token
D.
PIN
13.
What does the CER for a biometric device indicate?
A.
It indicates that the sensitivity is too high.
B.
It indicates that the sensitivity is too low.
C.
It indicates the point where the false rejection rate equals the false acceptance rate.
D.
When high enough, it indicates the biometric device is highly accurate.
14.
Sally has a user account and has previously logged on using a biometric system. Today, the 
biometric system didn’t recognize her so she wasn’t able to log on. What 
best
describes this?
A.
False rejection
B.
False acceptance
C.
Crossover error
D.
Equal error
15.
What is the primary purpose of Kerberos?
A.
Confidentiality
B.
Integrity
C.
Authentication
D.
Accountability
16.
Which of the following is the best choice to support a federated identity management (FIM) 
system?
A.
Kerberos
B.
Hypertext Markup Language (HTML)
C.
Extensible Markup Language (XML)
D.
Security Assertion Markup Language (SAML)
17.
What is the function of the network access server within a RADIUS architecture?
A.
Authentication server
B.
Client 
C.
AAA server
D.
Firewall

---

Review Questions 
621
18.
Which of the following AAA protocols is based on RADIUS and supports Mobile IP and 
VoIP?
A.
Distributed access control