Access Control and Authentication Quiz

What is the principle of Least Privilege?

• Individuals or systems are granted only those access rights or permissions essential to perform their intended functions.

• Individuals should have access only to the information and resources absolutely necessary for their specific tasks or roles.

• Dividing responsibilities and privileges among multiple people or systems to prevent fraud and errors.

• A layered approach to security that relies on multiple barriers across different layers.

What does the Need-to-Know principle stipulate?

• Individuals or systems are granted only those access rights or permissions essential to perform their intended functions.

• Individuals should have access only to the information and resources absolutely necessary for their specific tasks or roles.

• Dividing responsibilities and privileges among multiple people or systems to prevent fraud and errors.

• A layered approach to security that relies on multiple barriers across different layers.

What is Separation of Duties (SoD)?

• Individuals or systems are granted only those access rights or permissions essential to perform their intended functions.

• Individuals should have access only to the information and resources absolutely necessary for their specific tasks or roles.

• Dividing responsibilities and privileges among multiple people or systems to prevent fraud and errors.

• A layered approach to security that relies on multiple barriers across different layers.

What is Defense-in-Depth?

• Individuals or systems are granted only those access rights or permissions essential to perform their intended functions.

• Individuals should have access only to the information and resources absolutely necessary for their specific tasks or roles.

• Dividing responsibilities and privileges among multiple people or systems to prevent fraud and errors.

• A layered approach to security that relies on multiple barriers across different layers.

Why is access control essential for protecting confidentiality?

• It ensures that sensitive information is only accessible to authorized individuals or entities.

• It helps prevent unauthorized modification, alteration, or destruction of data and resources.

• It helps mitigate various security risks, including unauthorized access and data breaches.

• It helps organizations comply with regulatory requirements and avoid penalties.

What is the purpose of authentication?

• To verify the identity of an individual or entity attempting to access a system.

• To ensure that sensitive information is only accessible to authorized individuals.

• To prevent unauthorized modification, alteration, or destruction of data.

• To mitigate various security risks, including unauthorized access.

What is knowledge-based authentication?

• A method that requires users to provide something they know, such as a password.

• A method that relies on something the user possesses, such as a physical token.

• A method that utilizes unique biological characteristics to verify identity.

• A method that combines two or more authentication factors.

What is possession-based authentication?

• A method that requires users to provide something they know, such as a password.

• A method that relies on something the user possesses, such as a physical token.

• A method that utilizes unique biological characteristics to verify identity.

• A method that combines two or more authentication factors.

What is biometric authentication?

• A method that requires users to provide something they know, such as a password.

• A method that relies on something the user possesses, such as a physical token.

• A method that utilizes unique biological characteristics to verify identity.

• A method that combines two or more authentication factors.

What are the common biometric modalities?

• Fingerprint, facial recognition, iris recognition, voice recognition.

• Password, PIN, token, biometric.

• Knowledge-based, possession-based, biometric.

• None of the above.