Cybersecurity User Access Control Quiz

What type of attack attempts to gain unauthorized access by guessing passwords?

• a) Phishing

• b) Brute force attack

• c) Man-in-the-middle attack

• d) SQL injection

Which of the following best describes a biometric authentication method?

• a) Username and password

• b) Security questions

• c) Fingerprint scanning

• d) CAPTCHA

In the context of access control, what is the principle of least privilege?

• a) Giving users full access

• b) Denying all access by default

• c) Granting the minimum level of access necessary

• d) Assigning privileges based on seniority

Which access control model uses roles assigned to users to determine access?

• a) Discretionary Access Control (DAC)

• b) Mandatory Access Control (MAC)

• c) Role-Based Access Control (RBAC)

• d) Attribute-Based Access Control (ABAC)

What does the acronym SSO stand for in cybersecurity?

• a) Secure Socket Options

• b) Single Sign-On

• c) Simple Security Operations

• d) Secure Sign-On

What is the purpose of a digital certificate in authentication?

• a) To store passwords securely

• b) To provide a public key for encrypting communications

• c) To verify the authenticity of a user or device

• d) To log user activities

Which access control method requires manual approval for access requests?

• a) Discretionary Access Control (DAC)

• b) Mandatory Access Control (MAC)

• c) Role-Based Access Control (RBAC)

• d) Manual Access Control (MAC)

What is the primary purpose of access control in cybersecurity?

• a) To ensure data integrity

• b) To prevent unauthorized access to resources

• c) To encrypt sensitive data

• d) To improve network performance

Which term describes the process of verifying the identity of a user or device?

• a) Authorization

• b) Accounting

• c) Authentication

• d) Auditing

In which type of authentication does the system recognize a device previously used by the user?

• a) Biometric authentication

• b) Two-factor authentication

• c) Token-based authentication

• d) Device-based authentication