Match the types of e-authentication tokens to their description.
Drag each e-authentication token on the left to its corresponding description on the right.
Answer is in the explanation below.
Reference / correct answer:
Look-up secret token - A physical or electronic token that stores a set of secrets between the claimant and the credential service provider
Out-of-Band Token - A physical token that is uniquely addressable and can receive a verifier-selected secret for one-time use
Pre-registered Knowledge Token - A series of responses to a set of prompts or challenges established by the subscriber and credential service provider during the registration process
Memorized Secret Token - A secret shared between the subscriber and credential service provider that is typically character strings
Question 2(Software Development Security)
Match the access control type to the example of the control type.
Drag each access control type net to its corresponding example.
Answer is in the explanation below.
Reference / correct answer:
Administrative – labeling of sensitive data Technical – Constrained user interface Logical – Biometrics for authentication
Physical – Radio Frequency Identification 9RFID) badge
Question 3(New Update)
HOT SPOT
Which Web Services Security (WS-Security) specification handles the management of security tokens and the underlying policies for granting access? Click on the correct specification in the image below.
Answer is in the explanation below.
Reference / correct answer:
Reference: Java Web Services: Up and Running” By Martin Kalin page 228
Limited Time Offer – Save Now!
Don’t miss out — get full access at the best price.
