SEC+ Mod1 Part 3

What is the purpose of defining permissions at a granular level?

• To provide fine-grained control over access to specific resources or actions.

• To allow users to access all resources without restrictions.

• To simplify the permission assignment process.

• To ensure all users have the same level of access.

Answer explanation

To provide fine-grained control over access to specific resources or actions.

Why are regular access reviews important?

• To maintain the accuracy of permissions and reduce the risk of stale access.

• To increase the number of users with high-level access.

• To eliminate the need for compliance requirements.

• To avoid the need for user training and awareness.

Answer explanation

To maintain the accuracy of permissions and reduce the risk of stale access.

What is the role of audit trails and monitoring in permission management?

• To track user access and changes to permissions.

• To grant all users administrative access.

• To simplify the permission assignment process.

• To eliminate the need for compliance requirements.

Answer explanation

To track user access and changes to permissions.

What can result from compliance violations in permission assignments?

• Consequences, fines, and damage to an organization's reputation.

• Increased user access to all resources.

• Simplified permission management.

• Elimination of the need for audit trails.

Answer explanation

Compliance violations in permission assignments can result in consequences, fines, and damage to an organization's reputation.

Why is user training and awareness important in permission management?

• To educate users about the importance of proper permission management and the risks of over-privileged access.

• To grant all users the same level of access.

• To eliminate the need for regular access reviews.

• To simplify the permission assignment process.

Answer explanation

To educate users about the importance of proper permission management and the risks of over-privileged access.

Which of the following access control mechanisms emphasizes the creation of specific access rules or policies for individual users or resources?

• Discretionary Access Control (DAC)

• Mandatory Access Control (MAC)

• Rule-Based Access Control (RBAC)

• Rule-Based Access Control (RAC)

Answer explanation

Rule-Based Access Control (RAC) emphasizes creating specific access rules or policies for individual users or resources, making it the correct choice.

In which access control model do resource owners have the discretion over granting or revoking access to files and folders they own?

• Rule-Based Access Control (RBAC)

• Discretionary Access Control (DAC)

• Mandatory Access Control (MAC)

• Attribute-Based Access Control (ABAC)

Answer explanation

In Discretionary Access Control (DAC), resource owners have the discretion to grant or revoke access to files and folders they own.

Which access control mechanism is often used in scenarios where fine-grained control over access is required?

• Rule-Based Access Control (RAC)

• Discretionary Access Control (DAC)

• Mandatory Access Control (MAC)

• Role-Based Access Control (RBAC)

Answer explanation

Rule-Based Access Control (RAC) is often used in scenarios where fine-grained control over access is required, allowing for specific rules to dictate access permissions.

Which access control model is considered centralized and often used in financial institutions to manage access to sensitive financial data?

• Discretionary Access Control (DAC)

• Rule-Based Access Control (RAC)

• Mandatory Access Control (MAC)

• Attribute-Based Access Control (ABAC)

Answer explanation

Rule-Based Access Control (RAC) is considered centralized and often used in financial institutions to manage access to sensitive financial data.

Which access control model is often used in personal computing environments and file-sharing systems, where resource owners control access to their files and folders?

• Mandatory Access Control (MAC)

• Role-based Access Control (RBAC)

• Attribute-based Access Control (ABAC)

• Discretionary Access Control (DAC)

Answer explanation

Discretionary Access Control (DAC) is often used in personal computing environments and file-sharing systems, where resource owners control access to their files and folders.