User authentication mechanisms in Operating Systems - Practice Problems & Coding Challenges

Challenge - 5 Problems

🧠 Conceptual

intermediate

What is the primary purpose of multi-factor authentication (MFA)?

Multi-factor authentication (MFA) is a security method used in user authentication. What is its main goal?

A To store user passwords in an encrypted file on the server

B To allow users to log in without a password by using only a fingerprint

C To require users to provide two or more different types of evidence to verify their identity

D To limit the number of login attempts before locking the account

💡 Hint

Think about how MFA increases security beyond just a password.

MFA requires users to provide multiple types of evidence, such as something they know (password), something they have (a phone), or something they are (fingerprint), making unauthorized access harder.

📋 Factual

intermediate

Which authentication method uses a secret shared between the user and the system?

Among common authentication methods, which one relies on a secret known only to the user and the system?

A Token-based authentication

B Password-based authentication

C Biometric authentication

D Certificate-based authentication

💡 Hint

Consider which method requires memorizing a secret string.

Password-based authentication uses a secret password shared only between the user and the system to verify identity.

🔍 Analysis

advanced

What error will occur if a system tries to authenticate a user with a missing biometric template?

Consider a system that uses fingerprint data stored as a biometric template. What happens if the template is missing when the user tries to authenticate?

A Authentication fails due to missing data, resulting in an error or denial

B The system automatically falls back to password authentication without error

C The system grants access because no template means no check is needed

D The system crashes with a runtime exception

💡 Hint

Think about what happens if required data for verification is not available.

If the biometric template is missing, the system cannot verify the user’s fingerprint, so authentication fails or returns an error.

❓ Comparison

advanced

Which authentication mechanism provides the strongest protection against password theft?

Compare these authentication methods and select the one that best protects against password theft.

A Multi-factor authentication using password and hardware token

B Single-factor password authentication

C Password authentication with periodic forced resets

D Password stored in hashed form on the server

💡 Hint

Consider which method adds an extra layer beyond just the password.

Multi-factor authentication combining a password and a hardware token requires both factors, making it much harder for attackers to gain access even if the password is stolen.

❓ Reasoning

expert

Why is storing passwords using salted hashes more secure than storing plain hashes?

Explain why adding a salt to password hashes improves security compared to storing just the hash of the password.

A Salting encrypts the password making it unreadable to the system

B Salting speeds up the authentication process by caching hashes

C Salting allows passwords to be stored in plain text safely

D Salting prevents attackers from using precomputed tables to reverse hashes easily

💡 Hint

Think about how attackers try to guess passwords using common hash lists.

Salting adds unique random data to each password before hashing, so attackers cannot use precomputed hash tables (rainbow tables) to reverse the hashes easily.

Practice

1. Which of the following is the primary purpose of user authentication in operating systems?

easy

A. To verify the identity of a user before granting access

B. To speed up the system performance

C. To backup user data automatically

D. To install software updates

Solution

1. Step 1: Understand the role of authentication

   User authentication is designed to confirm who a user is before allowing access to system resources.

2. Step 2: Identify the correct purpose

   Among the options, only verifying user identity matches the purpose of authentication.

3. Final Answer:

   To verify the identity of a user before granting access -> Option A

4. Quick Check:

   Authentication = Verify identity [OK]

Hint: Authentication means confirming who you are [OK]

Common Mistakes:

• Confusing authentication with system performance
• Thinking authentication backs up data
• Mixing authentication with software updates

2. Which of the following is the correct syntax to prompt a user for a password in a Linux terminal?

easy

A. sudo

B. login

C. passwd

D. passwd -l

Solution

1. Step 1: Identify command to change or prompt password

   The passwd command is used to set or change a user's password in Linux.

2. Step 2: Check other options

   login starts a login session, sudo runs commands with elevated rights, and passwd -l locks the password, not prompts for it.

3. Final Answer:

   passwd -> Option C

4. Quick Check:

   passwd prompts for password [OK]

Hint: Use passwd to set or change passwords [OK]

Common Mistakes:

• Using sudo to prompt password directly
• Confusing login with password prompt
• Thinking passwd -l prompts password

3. Consider a system that uses two-factor authentication combining a password and a fingerprint scan. What is the main benefit of this approach?

medium

A. It improves security by requiring two different proofs of identity

B. It reduces the need for biometric devices

C. It allows users to skip entering passwords

D. It speeds up the login process significantly

Solution

1. Step 1: Understand two-factor authentication (2FA)

   2FA requires two different types of evidence to prove identity, such as something you know (password) and something you are (fingerprint).

2. Step 2: Identify the benefit

   This combination improves security by making unauthorized access harder, as both factors must be compromised.

3. Final Answer:

   It improves security by requiring two different proofs of identity -> Option A

4. Quick Check:

   2FA = Two proofs for better security [OK]

Hint: Two-factor means two different identity proofs [OK]

Common Mistakes:

• Thinking 2FA removes password requirement
• Believing 2FA reduces biometric device use
• Assuming 2FA always speeds login

4. A system administrator notices users complaining about frequent lockouts after entering correct passwords. Which of the following is the most likely cause?

medium

A. The system uses biometric authentication only

B. Account lockout policy triggers after multiple failed attempts

C. Users are not using two-factor authentication

D. Password complexity rules are too strict

Solution

1. Step 1: Analyze the lockout issue

   Frequent lockouts after correct password entries suggest the system locks accounts after several failed attempts to prevent unauthorized access.

2. Step 2: Identify the cause

   This behavior matches an account lockout policy that triggers after multiple failed login attempts, possibly due to typing errors or delays.

3. Final Answer:

   Account lockout policy triggers after multiple failed attempts -> Option B

4. Quick Check:

   Lockouts = Account lockout policy [OK]

Hint: Lockouts often caused by strict lockout policies [OK]

Common Mistakes:

• Assuming biometric-only causes lockouts
• Blaming password complexity for lockouts
• Thinking lack of 2FA causes lockouts

5. An organization wants to improve security by implementing multi-factor authentication (MFA). Which combination below best represents MFA?

hard

A. Password and username

B. Fingerprint scan and facial recognition

C. Password and password hint

D. Security token and password

Solution

1. Step 1: Understand multi-factor authentication (MFA)

   MFA requires two or more different types of authentication factors: something you know (password), something you have (token), or something you are (biometrics).

2. Step 2: Evaluate options for different factor types

   Password and username uses two knowledge factors (username and password), not MFA. Fingerprint scan and facial recognition uses two biometrics (both something you are), not MFA. Password and password hint uses password and hint (both knowledge). Security token and password uses a security token (something you have) and password (something you know), which is MFA.

3. Step 3: Choose the best MFA example

   Security token and password is best because it clearly uses two distinct factor types: token and password.

4. Final Answer:

   Security token and password -> Option D

5. Quick Check:

   MFA = Different factor types combined [OK]

Hint: MFA needs different factor types, not just passwords [OK]

Common Mistakes:

• Thinking username and password is MFA
• Confusing password hint as a factor
• Ignoring the need for different factor categories