Software Development and Security Quiz

Situation: A company is implementing an access control model that focuses on assigning access permissions to roles rather than directly to individual users. This model aims to streamline access management based on organizational positions and responsibilities. What access control model is the company likely implementing?

Situation: A company is implementing an access control model that makes access decisions based on various attributes of the user, resource, environment, and other factors. This model aims to provide more dynamic and context-aware access control. What access control model is the company likely implementing?

Situation: A company is implementing access control measures to enhance the security of its systems and data. They want to ensure that users only have access to the resources necessary for their job roles, minimizing the risk of unauthorized access. Which access control best practice does this describe?

Situation: A company is implementing access control measures to prevent a single individual from having excessive control over critical systems. They aim to distribute tasks among different personnel to enhance system security. Which access control best practice does this describe?

Situation: A company wants to implement a password policy that ensures passwords are securely stored and cannot be easily reversed back to their original form. Which aspect of the password policy addresses this requirement?

Situation: An organization aims to enforce strict criteria for password complexity, requiring users to include a combination of uppercase and lowercase letters, numbers, and special characters in their passwords. Which aspect of the password policy corresponds to this requirement?

Situation: An organization is exploring options for implementing a single sign-on solution that allows users to access multiple sites with one account. Which technology provides this capability?

Situation: A university wants to implement a method for users to access resources on its website after authenticating with an identity provider. Which technology, often used by universities and public organizations, provides this capability similar to SAML?

Situation: An organization is considering implementing a security method where the resource owner retains full control over who can access the resource. Which security method fits this description?

Situation: A system administrator is assessing different access control methods for implementing security measures in a UNIX/Linux environment. Which access control method provides the resource owner with full control over access rights?