authentication - answering phone

zackmaxzackmax Member Posts: 61 ■■□□□□□□□□
in Security+
you are called on your mobile phone for voice authentication.

Is this:
something you have and something you are ?
something you do and something you are ?

Thanks!
· Share on FacebookShare on Twitter

Comments

  • zackmaxzackmax Member Posts: 61 ■■□□□□□□□□
    a user cannot install a new and relatively unknown software on their system

    application black listing ?
    application white listing ?


    both of the above answers prevent unauthorized apps from being installed so its confusing.
    · Share on FacebookShare on Twitter
  • tmurphy3100tmurphy3100 Member Posts: 154 ■■■□□□□□□□
    Application white listing should allow it to be installed. So the answer would be blacklisting.
    2020 Goals: CCNA R&S, Cysa+, AZ103, Linux+, Pentest+
    · Share on FacebookShare on Twitter
  • zackmaxzackmax Member Posts: 61 ■■□□□□□□□□
    tmurphy3100 wrote: »
    Application white listing should allow it to be installed. So the answer would be blacklisting.

    Can it not be that under application white listing policy, this application is not present?
    · Share on FacebookShare on Twitter
  • tmurphy3100tmurphy3100 Member Posts: 154 ■■■□□□□□□□
    then again if it is a relatively new software and there is an implicit deny involved here, the answer could be different. These questions are very vague.
    2020 Goals: CCNA R&S, Cysa+, AZ103, Linux+, Pentest+
    · Share on FacebookShare on Twitter
  • cyberguyprcyberguypr Senior Member Mod Posts: 6,920 Mod
    Something you do is a behavior unique to you, more like handwriting dynamics or keystroke rhythm analysis. Calling your phone is something you have and voice is something you are.
    · Share on FacebookShare on Twitter
  • zackmaxzackmax Member Posts: 61 ■■□□□□□□□□
    cyberguypr wrote: »
    Something you do is a behavior unique to you, more like handwriting dynamics or keystroke rhythm analysis. Calling your phone is something you have and voice is something you are.

    Thanks!
    · Share on FacebookShare on Twitter
  • cyberguyprcyberguypr Senior Member Mod Posts: 6,920 Mod
    If you are blacklisting you are saying "only blocks these..., allow everything else". Whitelisting says "only allow these... block everything else". Taking the question at face value, the "new and relatively unknown" descriptor means the app would sail through a blacklist but will be blocked by a whitelist.
    · Share on FacebookShare on Twitter
  • OctalDumpOctalDump Member Posts: 1,722
    zackmax wrote: »
    you are called on your mobile phone for voice authentication.

    Is this:
    something you have and something you are ?
    something you do and something you are ?

    Thanks!

    Voice Biometrics over the phone is something that exists. Biometrics are definitely something you are.
    Your mobile phone is something assumed to be something you have. It's a little weaker as a token, because phone numbers can be forwarded away from a specific device. But mobile phones are used as tokens.

    The question I would have is how reasonable is it to assume that voice biometrics are in place. It could be that they are calling your mobile phone and asking for a pass phrase (something you know) which isn't analysed for biometrics.

    If biometrics are being used, and you are forced to choose between the two answers, then something you are is most reasonable. But in fact all three come into play normally as the biometric system generally uses the same phrase for accurate results and might not prompt.

    It's a good "thinking question" but not a good multiple choice exam question.
    2017 Goals - Something Cisco, Something Linux, Agile PM
    · Share on FacebookShare on Twitter
  • OctalDumpOctalDump Member Posts: 1,722
    zackmax wrote: »
    a user cannot install a new and relatively unknown software on their system

    application black listing ?
    application white listing ?

    both of the above answers prevent unauthorized apps from being installed so its confusing.

    On a multi-choice, white listing is the best answer. The implication is that only specific known programs are on the whitelist. This would mean "new" software is not likely to make it on the whitelist.
    2017 Goals - Something Cisco, Something Linux, Agile PM
    · Share on FacebookShare on Twitter
Sign In or Register to comment.