CASP+: Chapter5(3of3)

In which of the following scenarios is Role-Based Access Control (RBAC) commonly implemented?

• A) Regulating access to system resources and files in operating systems.

• B) Filtering incoming emails based on predefined criteria.

• C) Detecting and preventing potential security threats within a network.

• D) Analyzing network traffic patterns and comparing them against predefined rules.

In a network environment where incoming and outgoing network traffic needs to be regulated based on predefined rules, which security solution utilizes rule-based access control?

• A) Intrusion Detection and Prevention Systems (IDPS)

• B) Web Application Firewalls (WAF)

• C) Network Firewalls

• D) Email Filtering Systems

Which authentication protocol is commonly used for centralized authentication and directory services?

• A) Lightweight Directory Access Protocol (LDAP)

• B) Remote Authentication Dial-In User Service (RADIUS)

• C) Diameter

• D) Terminal Access Controller Access-Control System Plus (TACACS+)

Which technology is primarily used to manage and enforce digital rights for copyrighted content?

• Configuring Digital Watermarks in Azure

• Digital Rights Management (DRM)

• Data Loss Detection

• Watermarking

What method involves modifying sensitive data in a way that it cannot be traced back to the original data subject, ensuring privacy while allowing for data analysis?

• Noise Addition

• Format-Preserving Encryption (FPE)

• Scrambling or Shuffling

• Anonymization

Which method involves replacing actual sensitive data with fictitious or altered data to protect privacy while maintaining usability?

• Data obfuscation

• Data encryption

• Data segmentation

• Data anonymization

Which authentication protocol is commonly used for centralized user authentication and accounting for network access?

• A) Single Sign-On (SSO)

• B) Remote Authentication Dial-In User Service (RADIUS)

• C) Diameter

• D) Lightweight Directory Access Protocol (LDAP)

In a data protection strategy, which method involves adding random data to sensitive information to obscure its meaning and ensure its confidentiality?

• Anonymization

• Noise Addition

• Data Masking

• Tokenization

How is Role-Based Access Control (RBAC) typically utilized in cloud environments?

• A) Users are assigned roles that determine their permissions within the cloud environment.

• B) RBAC is implemented within software applications to manage user access to specific features or functionalities.

• C) RBAC mechanisms are used to regulate access to system resources and files in operating systems.

• D) RBAC controls access to databases and their associated objects in database management systems.

In an organization where access policies are determined by system-enforced rules rather than by system users, which access control model is implemented to complement protections based on discretionary access control?

• A) Discretionary Access Control (DAC)

• B) Mandatory Access Control (MAC)

• C) Role-Based Access Control (RBAC)

• D) Rule-Based Access Control (RBAC)