4 Network Authentication Free Online FlashCards

How do authentication and authorization differ?

Authentication verifies the identity of a person, device, or service; authorization determines what that identity is allowed to do.

What are the three authentication factor categories?

The three categories are something you know, something you have, and something you are.

Why is a username not an authentication factor?

A username identifies an account but is generally not secret, so it does not authenticate the user by itself.

Why don't two passwords count as MFA?

Both are knowledge factors. MFA requires proof from at least two different factor categories.

What minimum password lengths does the guidance specify?

A password used alone should be at least 15 characters. As part of MFA, it may be shorter but must be at least eight characters.

What security weakness can manually entered OTPs have?

Manually entered codes can be phished or relayed, so an OTP is not necessarily phishing-resistant.

How should a user respond to an unexpected push approval prompt?

Approve only sign-ins you initiated. Unexpected or repeated prompts may indicate an attack.

How can cryptographic authenticators resist phishing?

They use a private key to prove possession. When properly implemented, public-key methods can strongly resist phishing.

What role does EAP-TLS play in enterprise network access?

EAP-TLS uses TLS certificate-based authentication with 802.1X to authenticate a client for Wi-Fi and other network access.

What makes an authentication method phishing-resistant?

Phishing-resistant methods bind authentication to the legitimate service or session, making captured outputs harder to reuse at an impostor site.

What password practice reduces the risk of reuse across accounts?

Use a unique, long password for each account; a reputable password manager can help create and store them.

Which access should organizations protect with required MFA?

Organizations should require MFA for remote access, privileged accounts, and other high-impact services.