nerdexam
CompTIA

SY0-301 · Question #7

Employee badges are encoded with a private encryption key and specific personal information. The encoding is then used to provide access to the network. Which of the following describes this access…

The correct answer is A. Smartcard. A smartcard is a physical card containing an embedded microprocessor chip that stores a private encryption key and personal identity information, used to authenticate to networks and systems. This matches the badge description exactly.

General security concepts

Question

Employee badges are encoded with a private encryption key and specific personal information. The encoding is then used to provide access to the network. Which of the following describes this access control type?

Options

  • ASmartcard
  • BToken
  • CDiscretionary access control
  • DMandatory access control

How the community answered

(41 responses)
  • A
    90% (37)
  • B
    2% (1)
  • C
    5% (2)
  • D
    2% (1)

Why each option

A smartcard is a physical card containing an embedded microprocessor chip that stores a private encryption key and personal identity information, used to authenticate to networks and systems. This matches the badge description exactly.

ASmartcardCorrect

A smartcard contains an embedded integrated circuit chip that stores private cryptographic keys and personal data. When presented to a reader, the smartcard uses its stored private key to perform authentication operations, providing strong two-factor authentication - something you have (the card) combined with something you know (a PIN), which matches the described badge behavior precisely.

BToken

A token (such as an OTP hardware token) generates time-based or event-based one-time passwords and does not store a private encryption key encoded with personal information.

CDiscretionary access control

Discretionary Access Control (DAC) is an access control model where resource owners set permissions; it describes a policy framework, not a physical authentication device.

DMandatory access control

Mandatory Access Control (MAC) is an access control model where a central authority enforces access based on classification labels; it is a policy model, not a physical device.

Concept tested: Smartcard authentication with private key encoding

Source: https://learn.microsoft.com/en-us/windows/security/identity-protection/smart-cards/smart-card-architecture

Topics

#smart card#multifactor authentication#access control#physical security

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice