Q1easy
What is Federated Identity Management?
Back to Cyber Security
12 Questions Total
Authentication & Access Control MCQs
Topic-wise practice questions for Cyber Security. Test your knowledge, check solutions on demand, and pace your preparation.
Zero-leak answer engine • Rate-limited explanations
Practice in Timed ModeQ2easy
In biometric systems, what does the False Acceptance Rate (FAR) measure?
Q3easy
What is the primary difference between RBAC and DAC?
Q4medium
A user logs into a system using their fingerprint and a one-time password (OTP) sent to their mobile device. Which categories of authentication factors are being used?
Q5medium
An attacker uses a fraudulent website to intercept a user's 2FA SMS code in real-time and immediately uses it to log into the victim's real account. This demonstrates a weakness in which 2FA method?
Q6medium
You want to prevent "Privilege Creep" (where users accumulate permissions over time that they no longer need). Which process is most effective?
Q7medium
A biometric vendor claims their system has a Crossover Error Rate (CER) of 0.01%. How should a security professional interpret this?
Q8medium
Analyze the following logic for a login system. What is the primary
security flaw in this specific implementation?
auth_logic.js
function checkLogin(user_input, stored_hash) {
if (md5(user_input) === stored_hash) {
Q9medium
An organization wants to implement a system where access is granted based on the user's department, the time of day, and the security level of the document. Which access control model is most suitable?
Q10medium
A company uses a single set of credentials to allow employees to log into their email, the HR portal, and the internal wiki without re-entering their password. This is known as: