Learn to differentiate between various defensive controls and authentication mechanisms. This simulation focuses on identifying the correct technology for securing physical and logical network access based on user characteristics.

CND (312-38) Network Defense Simulation

Network Scenario

The organization is upgrading its High-Security Zone (HSZ) which houses the central data center and core network switches. Currently, access is controlled via traditional ID badges, but recent audits revealed "tailgating" incidents. As a Network Defense professional, you are tasked with implementing a multi-factor authentication (MFA) strategy that validates the actual physical presence and unique biological identity of authorized personnel before granting access to the server room console.

Traffic & Logs

Physical Access Log (Unauthorized Attempt)

[2023-10-24 14:22:01] ALERT: Door-04 (Server Room)
[2023-10-24 14:22:01] ENTRY_DENIED: Card_ID #9928
[2023-10-24 14:22:05] SENSOR: Motion detected without valid auth
[2023-10-24 14:22:10] CAM-02: Human silhouette detected
[2023-10-24 14:22:12] SYSTEM: Initiating Lockout Protocol

IAM Policy Audit

POLICY_ID: SEC-AUTH-01
REQUIREMENT: Non-Transferable Identity Verification
STATUS: PENDING UPGRADE
CURRENT_METHOD: Knowledge-based/Token-based
RECOMMENDED: Attribute-based Physical Identification

Question

Which of the following is a method of authentication that uses physical characteristics?

Expert Analysis

1. What is happening in the network

The physical access logs indicate a failure of the current token-based system (Card ID). The organization is experiencing unauthorized entry attempts that cannot be verified against a specific biological individual.

2. Identify attack or behavior

Tailgating or credential theft. Since traditional badges can be stolen or shared, they don't provide non-repudiation for physical presence.

3. Why correct answer is correct

Biometrics is the only option listed that relies on biological data (fingerprints, retina, facial structure) to verify identity. It falls under the "Something you are" factor of authentication.

4. Why others are wrong

COMSEC: Refers to Communications Security, focusing on protecting telecommunications through encryption and physical security.
ACL: Access Control Lists are logical software filters (on routers or firewalls) used to permit or deny traffic based on IP/Ports.
Honeypot: A decoy system designed to lure attackers to study their techniques.

5. Defensive action

Implement a biometric scanner (e.g., iris or fingerprint) at the entrance of the High-Security Zone to ensure that the individual requesting access matches the authorized user profile.

Mini Lesson: Authentication Factors

Type 1: Something you know (Passwords, PINs)
Type 2: Something you have (Smart cards, RSA tokens)
Type 3: Something you are (Biometrics) (Fingerprints, DNA, Retina)
Type 4: Somewhere you are (GPS, IP location)
Type 5: Something you do (Typing rhythm, signature)

Explore more CND simulations

Get Full Practice Access