4 Network Authentication Online Quiz Questions

True

False

Two factors, because the password and PIN are separate credentials

One factor, because both are things the user knows

Two factors, because a PIN is always a possession factor

No factors, because neither credential identifies an account

Authentication, because it determines which files the user may open

Authorization, because it determines what an authenticated identity may access

Multi-factor authentication, because the user is opening a protected folder

Enrollment, because a user has requested access to a resource

True

False

The fingerprint is sent to the network as the user's password

The fingerprint replaces the need for any device-held credential

The fingerprint locally unlocks a device-held key used to authenticate

The fingerprint determines which resources the user is authorized to access

A manually entered code, because a short-lived code cannot be relayed

A properly implemented cryptographic authenticator, because it can bind authentication to the legitimate service or session

A password, because using a unique password prevents phishing

A push prompt, because an approval notification cannot be targeted

Block passwords known to be commonly used or compromised

Limit repeated failed sign-in attempts

Require every user to change passwords on an arbitrary schedule, even when there is no sign of compromise

Allow unlimited failed attempts if the password contains enough characters

Store passwords using salted, purpose-built password hashing rather than readable text

Monitor authentication logs for unusual failures, locations, devices, and repeated MFA prompts

Keep passwords in readable text so staff can retrieve them during a sign-in problem

Ignore authentication logs whenever a sign-in succeeds

A password combined with a manually entered one-time code

A FIDO-based security key or passkey

Repeated push approvals on a registered phone

A password combined with a PIN

True

False

Approve the prompt if it arrives on a registered device, since registration confirms the request is legitimate.

Approve one prompt but ignore any later prompts, since only repeated requests indicate risk.

Do not approve it, and report the unexpected prompt through the organization’s process.

Share the prompt with a colleague so they can determine whether the request is genuine.

To help ensure the device is connecting to the legitimate network rather than sending credentials to a rogue network.

To let the device skip authentication whenever a familiar network name is detected.

To ensure that every Wi-Fi user receives broad access after presenting any certificate.

To replace the need for the client to authenticate with its own certificate.

Store passwords as readable text but restrict database access to administrators.

Store passwords using salted, purpose-built password-hashing methods.

Encrypt passwords with a shared key and retain the key alongside the password database.

Save only the password’s length and let users recover the original password from it.