ISC2 - CC - Chapter 3 - Module 3

Which of the following is the definition of logical access controls?

• Authentication methods that manage access to systems
• Authentication methods that manage access to physical locations
• Any control that involves technology
• All the other answers are correct

What is access control policy?

• A list of authorized users and their privileges
• A list of network devices and their configurations
• A set of guidelines and procedures for managing access to resources and data
• A list of resources and their security requirements

What do protect logical access controls?

• Physical Assets
• Information
• All assets
• People

Which of the following can never be considered a logical access control?

• PIN number
• Face pattern
• Fence
• USB key

What is a security token?

• A type of Access Control Model
• A type of encryption algorithm
• A physical device used to store authentication credentials
• A type of biometric identifier

What do access control models allow to assign in an efficient way?

• Authentication
• Authorization
• Non-repudiation
• Accounting

What does authorization mean?

• The process of verifying user's identity
• The process of granting access to resources and data
• The process of creating a copy of backup
• The process of encrypting data

Why do Access Control Models exists?

• Regulate access to resources
• Give permissions individually to people
• Authenticate users
• Control assets

Which of the following is NOT an Access Control Model?

• Private Access Control (PAC)
• Role-based Access Control (RBAC)
• Attribute-based Access Control (ABAC)
• Mandatory Access Control (MAC)

Which of the following access control models allows the creator of an object to delegate permissions?

• Discretionary Access Control (DAC)
• Role-based Access Control (RBAC)
• Mandatory Access Control (MAC)
• Attribute-based Access Control (ABAC)