Deck 7: Authentication and Authorization With Java

Question 1

5)PAM modules cannot be stacked together to support "stacked authentication" where an application can use one or more PAM modules for authentication.

Answer 1

False

Question 2

13)The JAAS framework defines the term ____ to represent the requester for a service.

A) resource
B) credential
C) subject
D) principal

Answer 2

C

Question 3

17)The ____ class is used by SaslServer to determine whether or not one entity can act on behalf of another entity in the SASL environment.

A) ChoiceCallback
B) AuthorizeCallback
C) LanguageCallback
D) RealmCallback

Answer 3

B

Question 4

19)The ____ class retrieves realm information for SaslClient and SaslServer.

A) ChoiceCallback
B) RealmCallback
C) LanguageCallback
D) AuthorizeCallback

Question 5

2)A good authentication technology should be platform and system dependent.

Question 6

18)The ___ class retrieves the locale used for localizing text.

A) ChoiceCallback
B) AuthorizeCallback
C) LanguageCallback
D) RealmCallback

Question 7

7)____ authentication is usually used with lightweight directory access protocol (LDAP) and Web authentication that transmits credentials across the network as an MD5 hash or message digest.

A) Passport
B) Digest
C) Kerberos
D) NTLM

Question 8

15)The ____ class represents a Java implementation of the PAM framework.

A) CallbackHandler
B) Principal
C) LoginContext
D) Subject

Question 9

12)With ____, authorization is implemented by allowing the administrator to control which users or groups have the right to perform various administrative functions or to take any action that affects systemwide resources.

A) administrative privileges
B) permissions inheritance
C) user-based authorization
D) discretionary access to securable objects

Question 10

6)To log all user roles and trace who, when, and what actions an entity performs, ____ is usually implemented with authentication and authorization.

A) sniffing
B) surveillance
C) auditing
D) ACL

Question 11

9)The idea of ____ is that all security contexts are linked to a user instead of an application.

A) discretionary access to securable objects
B) permissions inheritance
C) administrative privileges
D) user-based authorization

Question 12

8)____ authentication is an industry standard documented under RFC 1510 that is used with either a password or a smart card for interactive log on.

A) Kerberos
B) NTLM
C) LDAP
D) Digest

Question 13

3)Java 2 provides access controls based on where the code originated from and who signed the code.

Question 14

16)To support stacked authentication, each PAM module, using the LoginModule interface, supports the notion of two-phase authentication using the login() and ____ method.

A) commit()
B) logout()
C) submit()
D) reset()

Question 15

10)With ____, authorization is implemented when you control permissions for new objects created in a container object by setting inheritable permissions on the container.

A) user-based authorization
B) permissions inheritance
C) discretionary access to securable objects
D) administrative privileges

Question 16

14)Regarding JAAS, the term ____ is used to represent a name associated with a subject.

A) Subject
B) Resource
C) Credential
D) Principal

Question 17

Without authentication, it is impossible to assure who an entity is and whether or not to authorize any action at all.

Question 18

4)The Java security architecture itself has the ability to enforce authentication, or determining who runs the code, and authorization or determining what actions can be performed.

Question 19

20)The ____ PAM module prompts for a username and password. It then verifies the password against the password stored in a directory service configured using Java naming and directory interface (JNDI).

A) JndiLoginModule
B) KeyStoreLoginModule
C) SolarisLoginModule
D) UnixLoginModule

Question 20

11)____ enables authorization to be self-managed as an object owner can set permissions on all objects she or he created.

A) User-based authorization
B) Permissions inheritance
C) Administrative privileges
D) Discretionary access to securable objects

Question 21

33)Compare one-factor and multiple-factor authentication.

Question 22

38)Briefly describe the Refreshable interface.

Question 23

40)What are the general steps performed when authenticating a Subject in JAAS?

Question 24

31)A Subject can also own security-related attributes. These attributes are called ____________________ in JAAS.

Question 25

37)What are some of the benefits of using pluggable authentication modules?

Question 26

34)Does a "good" authentication technology that is platform/system independent and provides SSO exist today? Explain your answer.

Question 27

22)The ____ PAM module retrieves and makes available Solaris UID/GID/groups information for the current user.

A) NTLoginModule
B) SolarisSystem
C) UnixLoginModule
D) KeyStoreLoginModule

Question 28

24)The Java platform implements the concept of ____ to support thread execution across multiple modules with different context characteristics.

A) least privilege
B) least-common-denominator
C) private credentials
D) privilege credentials

Question 29

39)Briefly describe the Destroyable interface.

Question 30

21)The ____ PAM module provides a JAAS login module that prompts for a keystore alias and populates the subject with the alias's principal and credentials.

A) NTLoginModule
B) SolarisLoginModule
C) UnixLoginModule
D) KeyStoreLoginModule

Question 31

27)____________________ is the assurance that an entity is who it claims to be.

Question 32

28)____________________ is concerned with what an identity is allowed to do.

Question 33

36)What are the main goals of JAAS?

Question 34

41)What are some of the levels that can be set to specify the impact of the success or failure of a given log-in procedure on the overall JAAS authentication procedure?

Question 35

30)Authentication in JAAS is performed in a pluggable and stackable fashion. It is based on a concept called the ___________________ framework.

Question 36

26)In Java, a(n) ____ is used to make system resource access decisions based on the context it encapsulates.

A) AccessController
B) ACLController
C) AccessPolicyContext
D) AccessControlContext

Question 37

23)The ____ PAM module retrieves and makes available Unix UID/GID/groups information for the current user.

A) UnixLoginModule
B) SolarisSystem
C) SolarisLoginModule
D) UnixSystem

Question 38

29)____________________ is a list attached to an object in a system. It consists of control expressions, each of which grants or denies some ability to a particular user or group of users.

Question 39

35)Briefly describe authorization.

Question 40

25)In Java, the ____ class does this comparison. It programmatically checks permissions and obtains the current Subject associated with the active access control context as well.

A) AccessPolicy
B) ACLController
C) AccessController
D) AccessControlContext

Question 42

42)Briefly describe the java.security.policy class.