Interview Questions.

Question 1. What Is Two Factor Authentication (2fa) And Why Do I Need It?

Answer :

2FA is a technique for offering accelerated security for get entry to to computing resources. Homeland Security Presidential Directive 12 (HSPD12) requires that federal computing sources be secured through 2FA.

The two factors are:

'Something you recognize', along with a PIN number.
'Something you have', which include a hardware protection token or smartcard.
Question 2. Who Needs A Token?

Answer :

Tokens are required for all JSC/WSTF VPN users wishing to check in with an RSA Token. This consists of people connecting to the Center using Pulse Secure.

Networking Interview Questions
Question 3. How Do I Get An Rsa Token?

Answer :

If you are a NEW VPN user, you'll need to go into a Request in the NAMS for an RSA Token, in addition to request the JSC/WSTF VPN permissions to be added in your NDC area account.

ACES will notify you by using e-mail while your token is available for choose-up from the JSC/WSTF Service Center. If not picked up inside 30 days, your token can be recycled and a brand new request will need to be submitted to request a brand new RSA Token.

Question 4. What Is Rsa?

Answer :

RSA is a leading security seller that offers hardware tokens for 2FA (two element authentication). RSA SecurID is the method NASA chose for enforcing 2FA on servers and different computing assets the consumer does not have direct physical get right of entry to to.

Networking Tutorial
Question 5. What Obligations And Responsibilities Come With My Token?

Answer :

Nasa Procedural Requirements (NPR 2810.1A)

JSC I/T Security Handbook (ITS-HBK 2810.15-01A)

Active Directory Interview Questions
Question 6. How Do I Get Help If I Have A Problem Using My Token?

Answer :

JSC VPN users and System Administrators which have operational duty for a particular server with 2FA can call the Enterprise Service Desk at 281-483-4800, choice 2, or create a price ticket in ESD My Tickets for assistance troubleshooting tokens and the RSA server purchaser.

ORG customers with non-TFTI issued tokens must call their everyday System Administrator.  They will help you get get right of entry to to the server.

Question 7. What Do I Do If I Lose/misplace My Token?

Answer :

If the person loses or misplaces their token they're obligated to at once name the Enterprise Service Desk at 1-877-677-2123 and document it as lacking. ACES will briefly disable the token. The user will need to publish a brand new request for a alternative token being positive to consist of the ESD Ticket number within the request. See "How to Request a Replacement RSA Token."

Scrum Tutorial Scrum Interview Questions
Question eight. What Do I Do If When I Find My Lost Token?

Answer :

Please return it to the JSC RSA representative, Bldg eight or WSTF Service Center.

Question nine. What Do I Do If I Forget My Pin Number?

Answer :

Contact the Enterprise Service Desk at 1-877-677-2123, opt 2, or create a ticket in ESD My Tickets.

RSA Archer GRC Interview Questions
Question 10. How Long Will The Battery Last On My Token?

Answer :

On the back of your token is an expiration date. The token will close off approximately on that date. The token will not authenticate on or past that date.

Question eleven. I Have Been Told My Token Is In Next Token Mode. What Does This Mean?

Answer :

This can occur while your ID has failed to authenticate greater than the preset quantity of times (the incorrect passcode has been entered). This additionally takes place on random occasions even when you have previously authenticated so the gadget can validate the token continues to be to your ownership.

When you're brought on for the Next Token code
Wait for the tokencode to exchange for your token.
Enter ONLY the token code. Do no longer input your PIN+tokencode.
Desktop Support Interview Questions
Question 12. I Just Received A New Token, And It Is In New Pin Mode. What Does This Mean?

Answer :

You are in New PIN mode because your token is not but related to a PIN, which is required for two-aspect authentication. All new tokens can be on this mode, even substitute tokens.

How to create your personal PIN:

Please visit https://agencytokens.Nasa.Gov
Using your NEW token, input only the token code. Do Not Enter Your Pin.
You can be prompted to create a brand new pin.
Please create an 8 individual alphanumeric PIN. Do no longer use unique characters. Do not enter extra than an 8 character alphanumeric PIN.
Once a brand new PIN has been created the machine will ask you to authenticate the usage of the PIN and tokencode.
You can then go back to VPN login website online.
If your token is ready to expire and also you obtained a new token, please turn the token into the point of contact that issued your substitute token or drop the token off to JSC RSA Support representatives at Bldg 8. (WSTF customers at the ACES center POC Martin Seeley).
Networking Interview Questions
Question 13. I Logged On To The Jsc Vpn And It Says "new Pin Required". What Does This Mean?

Answer :

You were requested to create a new Personal Identification Number (PIN) earlier than you may sign in. This is probably due to your preceding PIN requiring a exchange to fulfill NASA PIN policy necessities.

How to create your new PIN that meets corporation necessities:

The PIN must be EXACTLY 8 characters in duration
The PIN have to be alpha-numeric (containing BOTH letters and numbers and is not case-touchy)
The PIN ought to NOT include any special characters
To continue logging in, please watch for the code on your SecurID token to alternate and then enter your NEW PIN followed by the SecurID token code when logging in again with your Username (and Password if required).
Question 14. I Have More Than One Token, All But One Has Been Disabled How Might This Have Happened?

Answer :

When a person has more than one token, any login failure will account in opposition to all of the tokens assigned to the user. A a success login will clear the failure counter against only the token getting used. Over time, it's miles possible that the failure anticipate 1 or more tokens has accrued with out a corresponding a success login if you want to result in those tokens being disabled. It is suggested that a failure to login with one token should be accompanied up with the aid of logging in successfully on all different tokens you have got assigned in your profile.

Question 15. My Token Is Not Working On A Server I Have Access To. Who Should I Contact?

Answer :

Contact the administrator of the device you need get right of entry to to.

Virtual Private Network (VPN) Interview Questions
Question 16. What Do I Do If My Token Is Damaged Or Stops Working?

Answer :

Take the token to the JSC RSA Support representatives at Bldg 8. The RSA RA's will decide if it desires to be replaced.
If the token desires alternative, a brand new token could be issued.
If not, they'll get it running once more (bodily operation problems best).
Question 17. Are Pins Alphanumeric Or Numeric?

Answer :

Both; PINs ought to be exactly eight (8) characters, alphanumeric, and have to comprise at the least one letter. Do no longer use unique characters.

Question 18. What Pin Length Is Used?

Answer :

PINs ought to be precisely eight (8) characters.

Active Directory Interview Questions
Question 19. My Token Only Works About Every 60 Seconds. What Is Wrong?

Answer :

Token codes can't be re-used. The Token hardware cycles those codes every 60 seconds. Once a code has been used you have to await the show to change the tokencode if you want to login some place else.

Question 20. A User With A Token Is Leaving Employment, What Should Be Done With The Token?

Answer :

All Government equipment have to be turned in while leaving employment, together with RSA tokens. IRD RSA tokens ought to be back by way of the parent organization to the JSC RSA Support representative, Bldg.Eight. ACES will need to eliminate all consumer account records from the token. There are rare exceptions for a few offsite users while tokens are reassigned. If you have got any questions or issues approximately the procedure, please contact the Enterprise Service Desk, 877-677-2123, choose 2, or create a ticket in ESD My Tickets.

Question 21. What Is The Process For Shipping A Token To A Remote Us Citizen Located Within The Country?

Answer :

ACES will deliver tokens but no longer internationally. Users which might be near enough to force on-web site will not be mailed a token.

Question 22. If A Token Leaves A Distributers Control Does It Need To Be Disabled?

Answer :

Yes. NASA calls for that every one tokens being shipped be disabled. An instance would be if a token desires to be mailed to an off-web page person. Also, if you are requesting a token for some other person please make it clear within the request that the token is being shipped so the token may be disabled before shipment.

Question 23. How Do You Re-allow A Token?

Answer :

A person with a disabled token need to contact the Enterprise Service Desk at 1-877-677-2123, choose 2, or create a price tag in ESD My Tickets to allow the token. If you are liable for delivery a token to a user, please ensure it’s disabled and coordinate with the consumer so that they know to contact the Enterprise Service Desk to permit the token before looking to use it.

Question 24. Can I Hand Deliver Rsa Tokens To Us Citizens Stationed Abroad?

Answer :

Yes. If authorized with the aid of the associated safety authentic (OCSO) to sign for and pick out up the tokens, a US citizen can hand deliver tokens to US citizens stationed abroad so long as they preserve custody to the very last vacation spot (quit person).

Scrum Interview Questions
Question 25. Can I Use My Rsa Token At Other Nasa Centers?

Answer :

If you are touring any other NASA center, you may use your TFTI RSA token at NASA facilities that allow institutional Two Factor Token Infrastructure (TFTI) RSA token get entry to to sources your token presently permits get entry to to.

If you are transferring to every other NASA middle, you will want to return your TFTI RSA token to the issuing center.