Week10 -Access Control and Authentication

What is the first step in the access control process?

• Authentication

• Authorization

• Identification

• Accounting

Which of the following is an example of "something you are" in authentication factors?

• Password

• OTP

• Biometric fingerprint

• Security token

What is the principle of least privilege in access control?

• Allowing access to all users

• Granting users the minimum access required to perform their tasks

• Denying all access unless explicitly approved

• Allowing unrestricted access to administrative users

Which access control model enforces access based on data confidentiality and user clearance levels?

• Discretionary Access Control (DAC)

• Mandatory Access Control (MAC)

• Role-Based Access Control (RBAC)

• Rule-Based Access Control (RAC)

In Role-Based Access Control (RBAC), access is granted based on:

• Organizational roles

• User preferences

• Device type

• Time of day

What is the key difference between an IDS and an IPS?

• IDS monitors; IPS prevents attacks

• IDS prevents attacks; IPS monitors

• IDS uses heuristic-based detection; IPS uses signature-based detection

• IDS operates inline; IPS operates offline

Which of the following is NOT an advantage of passwordless authentication?

• Reduces phishing risk

• Requires password memory exercises

• Faster login times

• Reduces credential reuse risks

What type of detection method identifies attacks by comparing behavior to a baseline?

• Signature-based detection

• Anomaly-based detection

• Hybrid detection

• Rule-based detection

Which access control model evaluates attributes such as time, location, and user role to determine access?

• Discretionary Access Control (DAC)

• Mandatory Access Control (MAC)

• Attribute-Based Access Control (ABAC)

• Rule-Based Access Control (RAC)

In biometric authentication, False Rejection Rate (FRR) measures:

• The percentage of times a system incorrectly rejects an authorized user

• The percentage of times a system incorrectly accepts an unauthorized user

• The percentage of times a system fails to capture biometric data

• The time taken to process biometric data