Access Control Quiz

Which part of access control is responsible for determining who is requesting access to an asset?

• Authentication

• Identification

• Authorization

• Accountability

What is the main purpose of authorization in the access control process?

• To verify the requestor's identity

• To determine what resources a user can access and what actions they can perform

• To log actions performed by users

• To provide physical access to a facility

Physical access controls are primarily concerned with which of the following?

• Usernames and passwords

• Protection of tangible assets

• Biometric data

• Protection of intangible assets

Which of the following is NOT considered a form of accountability in access control?

• Logging user actions

• Encrypting sensitive data

• Monitoring user access patterns

• Auditing access logs

Which part of access control is responsible for the verification of user's identity, often using passwords, biometrics, or tokens.

• Authentication

• Identification

• Authorization

• Accountability

A university uses a system where only faculty can access certain research databases, while students have access to general information and course materials.

• Mandatory Access Control (MAC)

• Discretionary Access Control (DAC)

• Role-Based Access Control (RBAC)

• Rule-Based Access Control

What type of access control is represented by the use of security cards for hotel entry?

• Mandatory Access Control (MAC)

• Physical Access Control

• Logical Access Control

• Rule-Based Access Control

A hospital has a strict access control policy where only doctors can access patient medical records. Nurses can only view basic patient information but cannot modify any records.

• Mandatory Access Control (MAC)

• Role-Based Access Control (RBAC)

• Discretionary Access Control (DAC)

• Rule-Based Access Control

A bank uses a system where customers must enter their unique PIN after inserting their bank cards into an ATM. What type of access control is primarily used in this scenario?

• Mandatory Access Control (MAC)

• Physical Access Control

• Logical Access Control

• Rule-Based Access Control

In a military base, access to classified information is controlled by security clearance levels. Only personnel with Top Secret clearance can access the most sensitive documents, while those with Secret clearance can only access less sensitive information. Anyone without the correct clearance cannot access these documents.

• Mandatory Access Control (MAC)

• Discretionary Access Control (DAC)

• Role-Based Access Control (RBAC)

• Rule-Based Access Control