CLASSROOM // HOMELAB ACADEMY M13 QUIZ
M13 QUIZquiz

Homelab Academy / Modules

Check yourself 04-authentication-and-access-control: Quiz

Retrieval practice. Target >=80%.

Overview

Module: Edge Access & VPN
Activity type: Quiz / retrieval practice
Target: ≥80%
Objective: Explain the difference between identification, authentication, authorization, and accounting.

Learn

Questions

    1. What is the difference between identification, authentication, and authorization?
    1. Why should a service use a unique salt when deriving each password verifier?
    1. Does combining a password with a second password provide two independent authentication factors? Explain.
    1. Why must a protected API perform authorization checks even after a valid login?
    1. What does default deny mean in an access-control policy?
    1. Why should unknown users, disabled accounts, and incorrect passwords generally receive similar external error messages?
    1. Name two categories of data that should never be written to an authentication audit log.
    1. Why is hiding an administrative button insufficient to protect the administrative operation?
    1. What security problem can occur when roles continually gain permissions but are rarely reviewed?
    1. Why can a successful password check still result in an authentication failure for a disabled account?
Learn

After scoring

  • Missed items → return to Reading → redo Feynman Retry → reattempt.
← HomeworkModule project →