IS404 - IT Security OCT 2023

What did you learned last meeting [IS Security]

What is the main purpose of Access and Identity Management

• To increase costs

• To improve compliance

• To encourage unauthorized activity

• To limit visibility

What is an example of a strong authentication mechanism?

• To make it easier for attackers to gain unauthorized access

• To reduce the risk of unauthorized access

• No authenticationTo limit user access

• Weak authenticationTo increase the number of security incidents

Which principle of access control focuses on granting users only the privileges they need?

• Least privilege

• Need to know

• Separation of duties

• All of the above

What is one of the main benefits of implementing IAM?

• Increased security incidents

• Reduced visibility

• Improved efficiency

• Decreased compliance

Which authentication mechanism uses physical characteristics for user authentication?

• Password authentication

• Biometric authentication

• Token authentication

• Role-based authentication

What tasks are involved in managing user identities and access rights?

• Creating and managing user accounts, assigning permissions, and monitoring user activity

• Disabling user accounts, changing user passwords, and deleting user accounts

• Assigning permissions only

• Monitoring user activity only

What is the purpose of role-based access control (RBAC)?

• To assign permissions to users based on their roles

• To give complete control to one user

• To limit access to no one

• To assign permissions randomly

What is the primary goal of access control?

• To allow unauthorized access to sensitive data

• To protect sensitive data from unauthorized access

• To increase security incidents

• To decrease compliance

How can IAM help reduce costs for organizations?

• By increasing the number of security incidents

• By decreasing compliance with security regulations

• By reducing the number of security incidents

• By limiting access to resources