ITF - Quiz 14.1 - Access Controls

What is access control in computer security?

• A. Dictating how entities interact with resources

• B. Verifying the identity of users

• C. Tracking authorized and unauthorized usage of resources

• D. Assigning security labels to subjects and objects

What is the purpose of identification in access control?

• A. To create user accounts

• B. To verify user identity

• C. To determine user permissions

• D. To track user activities

What is the principle of least privilege?

• A. Granting excessive privileges to users

• B. Granting minimum rights necessary for specific tasks

• C. Granting full control over resources to the owner

• D. Granting access to users within the same domain

What is the principle of implicit deny?

• A. Denying access by default unless explicitly granted

• B. Granting access by default unless explicitly denied

• C. Denying access to users with high clearance levels

• D. Granting access to users based on organizational roles

What is the role of accounting in access control?

• A. Creating user accounts

• B. Verifying user identity

• C. Tracking user activities

• D. Assigning security labels to subjects and objects

Which access control model places emphasis on the resource owner?

• A. Discretionary Access Control (DAC)

• B. Role-based Access Control (RBAC)

• C. Mandatory Access Control (MAC)

• D. Rule-based Access Control

What is the additional layer introduced by Role-based Access Control (RBAC)?

• A. Administrative control

• B. Security clearance levels

• C. User-defined access control policies

• D. Continuous authentication

What is the basis of Mandatory Access Control (MAC)?

• A. User-defined access control policies

• B. Administrative control

• C. Security clearance levels

• D. Continuous authentication

Which access control model enforces policies through system rules?

• A. Discretionary Access Control (DAC)

• B. Role-based Access Control (RBAC)

• C. Mandatory Access Control (MAC)

• D. Rule-based Access Control

What is the purpose of accounting in access control?

• A. Creating user accounts

• B. Verifying user identity

• C. Tracking user activities

• D. Assigning security labels to subjects and objects