2 cissp ® Official Study Guide Eighth Edition

619
6.
A user logs in with a login ID and a password. What is the purpose of the login ID?
A.
Authentication
B.
Authorization
C.
Accountability
D.
Identification 
7.
Accountability requires all of the following items except one. Which item is not required for 
accountability?
A.
Identification
B.
Authentication
C.
Auditing
D.
Authorization
8.
What can you use to prevent users from rotating between two passwords?
A.
Password complexity
B.
Password history
C.
Password age
D.
Password length
9.
Which of the following 
best
identifies the benefit of a passphrase?
A.
It is short.
B.
It is easy to remember.
C.
It includes a single set of characters.
D.
It is easy to crack.
10.
Which of the following is an example of a Type 2 authentication factor?
A.
Something you have
B.
Something you are
C.
Something you do
D.
Something you know
11.
Your organization issues devices to employees. These devices generate onetime passwords 
every 60 seconds. A server hosted within the organization knows what this password is at 
any given time. What type of device is this?
A.
Synchronous token
B.
Asynchronous token
C.
Smartcard
D.
Common access card

---

620
Chapter 13 
■
Managing Identity and Authentication
12.
Which of the following provides authentication based on a physical characteristic of a
subject?