Chapter 5(3of3)

An organization is implementing a security measure where security clearance levels are assigned to objects and users. Users can only access objects with a clearance level equal to or lower than their own, and these clearance levels cannot be changed by users. Which access control method aligns with this description?

• Discretionary Access Control (DAC)

• Attribute-Based Access Control (ABAC)

• Mandatory Access Control (MAC)

• Role-Based Access Control (RBAC)

In an organization where strict control over access rights is essential, which access control method assigns security clearance levels to objects and users, ensuring that users can only access objects with clearance levels equal to or lower than their own, and prevents users from altering security settings?

• Attribute-Based Access Control (ABAC)

• Role-Based Access Control (RBAC)

• Discretionary Access Control (DAC)

• Mandatory Access Control (MAC)

An organization is implementing an access control model where access policies are determined by system-enforced rules rather than by system users. These rules complement protections based on discretionary access control. Which access control model aligns with this description?

• Rule-Based Access Control (RBAC)

• Role-Based Access Control (RBAC)

• Mandatory Access Control (MAC)

• Discretionary Access Control (DAC)

In an organization where access policies are determined by system-enforced rules rather than by system users, which access control model is implemented to complement protections based on discretionary access control?

• Discretionary Access Control (DAC)

• Rule-Based Access Control (RBAC)

• Mandatory Access Control (MAC)

• Role-Based Access Control (RBAC)

In a network environment where incoming and outgoing network traffic needs to be regulated based on predefined rules, which security solution utilizes rule-based access control?

• Web Application Firewalls (WAF)

• Intrusion Detection and Prevention Systems (IDPS)

• Email Filtering Systems

• Network Firewalls

Which security solution utilizes rule-based access control to protect web applications from cyber threats such as SQL injection, cross-site scripting (XSS), and distributed denial-of-service (DDoS) attacks by inspecting HTTP requests and responses?

• Intrusion Detection and Prevention Systems (IDPS)

• Web Application Firewalls (WAF)

• Network Firewalls

• Email Filtering Systems

In which of the following scenarios is Role-Based Access Control (RBAC) commonly implemented?

• Filtering incoming emails based on predefined criteria.

• Detecting and preventing potential security threats within a network.

• Regulating access to system resources and files in operating systems.

• Analyzing network traffic patterns and comparing them against predefined rules.

How is Role-Based Access Control (RBAC) typically utilized in cloud environments?

• RBAC controls access to databases and their associated objects in database management systems.

• RBAC is implemented within software applications to manage user access to specific features or functionalities.

• Users are assigned roles that determine their permissions within the cloud environment.

• RBAC mechanisms are used to regulate access to system resources and files in operating systems.

Which authentication protocol is commonly used for centralized authentication and directory services?

• Diameter

• Remote Authentication Dial-In User Service (RADIUS)

• Terminal Access Controller Access-Control System Plus (TACACS+)

• Lightweight Directory Access Protocol (LDAP)

Which authentication protocol is commonly used for centralized user authentication and accounting for network access?

• Single Sign-On (SSO)

• Remote Authentication Dial-In User Service (RADIUS)

• Lightweight Directory Access Protocol (LDAP)

• Diameter