4. Answer the multiple choice questions in problem 11.10 on pages 363-364. 1. The system employs a compatibility test to decide whether to let a particular employee update records in a particular file. The compatibility test is a part of the aspect of access control referred to as a. authentication b. authorization c. accountability 2. The set of instructions for taking advantage of a flaw in a program is called a(n) a. vulnerability b. patch c. update d. exploit 3. Firewalls are most effective in reducing the ability of an attacker to a. conduct initial reconnaissance b. research vulnerabilities and exploits c. scan and map the target d. all of the above are prevented by firewalls e. none of the above are prevented by firewalls 4. A company's current password policy requires that passwords be alphanumeric, case-sensitive, and be 10 characters long. Which one of the following changes to a company's password policy will increase password strength the most? a. Require passwords to also include special characters (such as $, &, etc.) b. Require passwords to be 15 characters long c. Both of the above changes would have the same effect on password strength 5. Which of the following set of authentication credentials provides the strongest access control? a. A password and a security question. b. A PIN and a smart card. c. Voice recognition and a fingerprint. d. All of the combinations of credentials are equally strong. 6 Skin 9. ABC bank wants to strengthen the security of its online bill-pay features. Therefore, it decides that in addition to a password, users must also correctly enter a 6-digit number sent to their smartphone. This is an example of a process referred to as a. multifactor authentication b. multimodal authentication c. Neither of the other statements are true