2.1 Logical Security

Question 1

What is the principle of least privilege?

Answer 1

Granting users and applications only the minimum permissions necessary to perform their tasks.

This principle helps to enhance security by limiting access rights.

Question 2

Why is the principle of least privilege important?

Answer 2

It limits potential damage from malware, errors, or unauthorized access.

By restricting permissions, the risk of exploitation is minimized.

Question 3

What is the Zero Trust security model?

Answer 3

A model that assumes no user, device, or application is trusted by default, even inside the network.

This approach enhances security by verifying every access request.

Question 4

What is required in a Zero Trust environment?

Answer 4

Continuous authentication and authorization for every access request.

This ensures that trust is never assumed and must be verified constantly.

Question 5

What is an Access Control List (ACL)?

Answer 5

A set of rules that allows or denies network traffic based on criteria like IP address, port, or protocol.

ACLs are essential for managing network security.

Question 6

Where are ACLs commonly used?

Answer 6

• On routers
• On firewalls
• On systems to control access and network traffic

They play a crucial role in network security management.

Question 7

What is Multifactor Authentication (MFA)?

Answer 7

A security method that requires two or more forms of identity verification.

MFA significantly enhances security by requiring multiple proofs of identity.

Question 8

What are the categories of authentication factors in MFA?

Answer 8

• Something you know
• Something you have
• Something you are
• Somewhere you are

These categories help to strengthen the authentication process.

Question 9

Why is MFA more secure than single-factor authentication?

Answer 9

It requires multiple independent proofs of identity, reducing the risk of unauthorized access.

This layered approach enhances overall security.

Question 10

How does email authentication work as an MFA method?

Answer 10

A verification code or link is sent to a user’s email to confirm identity.

This method adds an additional layer of security.

Question 11

Why is email-based authentication considered weaker MFA?

Answer 11

Because email accounts can be compromised and are often protected by the same credentials being verified.

This vulnerability can lead to security breaches.

Question 12

What is token generation in MFA?

Answer 12

The use of apps or hardware devices to generate time-based or random authentication codes.

Token generation enhances security by providing unique codes for authentication.

Question 13

What are examples of token generation tools?

Answer 13

• Mobile authenticator apps
• Physical hardware token devices

These tools are widely used for secure authentication.

Question 14

How does SMS or phone call authentication work?

Answer 14

A one-time code is sent via text message or voice call to verify identity.

This method is commonly used for two-factor authentication.

Question 15

What are the security risks of SMS-based authentication?

Answer 15

It is vulnerable to social engineering, SIM swapping, and message interception.

These risks can compromise the security of the authentication process.

Question 16

What is Time-based One-Time Password (TOTP)?

Answer 16

A code generated using a shared secret and synchronized time that changes at regular intervals (e.g., every 30 seconds).

TOTP is a secure method for generating temporary passwords.

Question 17

What is an example of an application that uses TOTP?

Answer 17

Authenticator apps like Google Authenticator or similar mobile apps.

These apps provide a convenient way to generate TOTP codes.

Question 18

What is a One-Time Password (OTP)?

Answer 18

A code that can be used only once and then becomes invalid.

OTPs enhance security by preventing reuse of authentication codes.

Question 19

How does OTP differ from TOTP?

Answer 19

OTP codes are single-use and not necessarily time-synchronized, while TOTP codes are time-based and periodically change.

This distinction affects how each type of password is generated and used.

Question 20

Why are OTPs considered secure?

Answer 20

Because each code is valid only once, reducing the risk of reuse or interception.

This feature makes OTPs a reliable method for authentication.