ISC3 - Domain 3 - Access Control Concepts

Which of the following is an example of security control?

• Computer mouse

• Firewall

• Network cable

• Web browser

What is the definition of an object in the context of access controls?

• A device with onboard firmware

• An entity that responds to a request for service

• Anything that initiates a request for service

• Something that contains its own access control logic

Derrick logs on to a system to read a file.  In this example, Derrick is the ______.

• Object

• Predicate

• Process

• Subject

Which of the following is a subject?

• Fence

• File

• Filename

• User

What is the strategy that integrates people, technology, and operations capabilities to establish variable barriers across multiple layers and missions of an organization?

• Cyberattack Prevention

• Layered Defense

• Multi-Factor Authentication

• Single Point of Failure

How does privileged access management implement the principle of least privilege?

• By granting each user access only to the items they need

• By granting maximum access to all users

• By providing access based on seniority

• By restricting access to only the most critical information

In Mandatory Access Control (MAC), what determines the level of access to certain areas in certain government agencies?

• Government policy and security clearance

• Individual judgment

• On a request basis

• Owner's discretion

Which of the following is an example of a logical access control method?

• Biometrics on a smartphone

• Cameras

• Security guards

• Turnstiles

Limiting access to data on the network would be considered which of the following controls?

• Administrative controls

• Logical or technical controls

• Physical controls

• Virtualization controls

What would be considered an administrative control in the context of seat belt usage?

• Attaching the seat belt to the car

• Building a car with seat belts

• Passing a law requiring seat belt use

• Using the seat belt