User authentication mechanisms in Operating Systems - Interactive Code Practice

Practice - 5 Tasks

1fill in blank

easy

Complete the code to identify the common factor used in password authentication.

Operating Systems

Authentication often requires a [1] that only the user knows.

Drag options to blanks, or click blank then click option'

Apassword

Busername

Cemail

DIP address

Attempts:

3 left

💡 Hint

Common Mistakes

Confusing username with password.

Thinking email is used for authentication instead of identification.

The password is a secret known only to the user, used to verify identity.

2fill in blank

medium

Complete the code to specify a type of authentication that uses physical characteristics.

Operating Systems

Biometric authentication uses [1] like fingerprints or facial recognition.

Drag options to blanks, or click blank then click option'

Abiometrics

Btokens

Cpasswords

DPINs

Attempts:

3 left

💡 Hint

Common Mistakes

Choosing passwords or PINs which are knowledge-based, not physical.

Confusing tokens with biometrics.

Biometrics are unique physical traits used to verify identity.

3fill in blank

hard

Fix the error in the statement about multi-factor authentication.

Operating Systems

Multi-factor authentication requires [1] types of credentials from different categories.

Drag options to blanks, or click blank then click option'

Aone

Btwo

Cthree

Dfour

Attempts:

3 left

💡 Hint

Common Mistakes

Thinking only one factor is enough.

Assuming three or more factors are always required.

Multi-factor authentication requires at least two different types of credentials, such as something you know and something you have.

4fill in blank

hard

Fill both blanks to complete the description of a common authentication protocol.

Operating Systems

The [1] protocol uses a [2] to verify user identity over a network.

Drag options to blanks, or click blank then click option'

AKerberos

Bpassword

COAuth

Dtoken

Attempts:

3 left

💡 Hint

Common Mistakes

Confusing OAuth with Kerberos.

Using password instead of token for network verification.

Kerberos is an authentication protocol that uses tokens (tickets) to verify identity securely over a network.

5fill in blank

hard

Fill all three blanks to complete the explanation of authentication factors.

Operating Systems

Authentication factors include [1] (something you know), [2] (something you have), and [3] (something you are).

Drag options to blanks, or click blank then click option'

Aknowledge

Bpossession

Cinherence

Dlocation

Attempts:

3 left

💡 Hint

Common Mistakes

Including location as a main factor.

Mixing up possession and inherence.

The three main authentication factors are knowledge (like passwords), possession (like security tokens), and inherence (biometrics).

Practice

1. Which of the following is the primary purpose of user authentication in operating systems?

easy

A. To verify the identity of a user before granting access

B. To speed up the system performance

C. To backup user data automatically

D. To install software updates

Solution

1. Step 1: Understand the role of authentication

   User authentication is designed to confirm who a user is before allowing access to system resources.

2. Step 2: Identify the correct purpose

   Among the options, only verifying user identity matches the purpose of authentication.

3. Final Answer:

   To verify the identity of a user before granting access -> Option A

4. Quick Check:

   Authentication = Verify identity [OK]

Hint: Authentication means confirming who you are [OK]

Common Mistakes:

• Confusing authentication with system performance
• Thinking authentication backs up data
• Mixing authentication with software updates

2. Which of the following is the correct syntax to prompt a user for a password in a Linux terminal?

easy

A. sudo

B. login

C. passwd

D. passwd -l

Solution

1. Step 1: Identify command to change or prompt password

   The passwd command is used to set or change a user's password in Linux.

2. Step 2: Check other options

   login starts a login session, sudo runs commands with elevated rights, and passwd -l locks the password, not prompts for it.

3. Final Answer:

   passwd -> Option C

4. Quick Check:

   passwd prompts for password [OK]

Hint: Use passwd to set or change passwords [OK]

Common Mistakes:

• Using sudo to prompt password directly
• Confusing login with password prompt
• Thinking passwd -l prompts password

3. Consider a system that uses two-factor authentication combining a password and a fingerprint scan. What is the main benefit of this approach?

medium

A. It improves security by requiring two different proofs of identity

B. It reduces the need for biometric devices

C. It allows users to skip entering passwords

D. It speeds up the login process significantly

Solution

1. Step 1: Understand two-factor authentication (2FA)

   2FA requires two different types of evidence to prove identity, such as something you know (password) and something you are (fingerprint).

2. Step 2: Identify the benefit

   This combination improves security by making unauthorized access harder, as both factors must be compromised.

3. Final Answer:

   It improves security by requiring two different proofs of identity -> Option A

4. Quick Check:

   2FA = Two proofs for better security [OK]

Hint: Two-factor means two different identity proofs [OK]

Common Mistakes:

• Thinking 2FA removes password requirement
• Believing 2FA reduces biometric device use
• Assuming 2FA always speeds login

4. A system administrator notices users complaining about frequent lockouts after entering correct passwords. Which of the following is the most likely cause?

medium

A. The system uses biometric authentication only

B. Account lockout policy triggers after multiple failed attempts

C. Users are not using two-factor authentication

D. Password complexity rules are too strict

Solution

1. Step 1: Analyze the lockout issue

   Frequent lockouts after correct password entries suggest the system locks accounts after several failed attempts to prevent unauthorized access.

2. Step 2: Identify the cause

   This behavior matches an account lockout policy that triggers after multiple failed login attempts, possibly due to typing errors or delays.

3. Final Answer:

   Account lockout policy triggers after multiple failed attempts -> Option B

4. Quick Check:

   Lockouts = Account lockout policy [OK]

Hint: Lockouts often caused by strict lockout policies [OK]

Common Mistakes:

• Assuming biometric-only causes lockouts
• Blaming password complexity for lockouts
• Thinking lack of 2FA causes lockouts

5. An organization wants to improve security by implementing multi-factor authentication (MFA). Which combination below best represents MFA?

hard

A. Password and username

B. Fingerprint scan and facial recognition

C. Password and password hint

D. Security token and password

Solution

1. Step 1: Understand multi-factor authentication (MFA)

   MFA requires two or more different types of authentication factors: something you know (password), something you have (token), or something you are (biometrics).

2. Step 2: Evaluate options for different factor types

   Password and username uses two knowledge factors (username and password), not MFA. Fingerprint scan and facial recognition uses two biometrics (both something you are), not MFA. Password and password hint uses password and hint (both knowledge). Security token and password uses a security token (something you have) and password (something you know), which is MFA.

3. Step 3: Choose the best MFA example

   Security token and password is best because it clearly uses two distinct factor types: token and password.

4. Final Answer:

   Security token and password -> Option D

5. Quick Check:

   MFA = Different factor types combined [OK]

Hint: MFA needs different factor types, not just passwords [OK]

Common Mistakes:

• Thinking username and password is MFA
• Confusing password hint as a factor
• Ignoring the need for different factor categories