Authentication and Access Control

What is the primary purpose of identification in cybersecurity?

• To verify a user's identity

• To determine what resources a user can access

• To establish a user's identity

• To encrypt user data

Which of the following is an example of authentication?

• Entering a username

• Entering a password

• Logging out of a system

• Accessing a public website

Authorization determines:

• • How a user logs in

  
  

• Who a user is

• What a user can do

• When a user logs i

Which statement is true about authentication and authorization?

• Authentication verifies identity, while authorization grants access

• Authorization verifies identity, while authentication grants access

• Both are the same

• Neither are necessary for security

What is the main goal of access control?

• To prevent unauthorized access

• To monitor user activity

• To encrypt data

• To create user accounts

User access management involves:

• Creating and managing user accounts

• Encrypting user data

• Monitoring network traffic

• Installing antivirus software

System and application access control ensures:

• All users can access any system or application.
• Access is granted based on user age.
• Systems and applications are open to the public.
• Only authorized users can access specific systems and applications.

Which of the following is a type of access control?

• Password-based access control
• Time-based access control
• Role-based access control (RBAC)
• Location-based access control

The principle of least privilege means:

• A security principle that restricts user access rights to the minimum necessary.
• A guideline that encourages sharing passwords among users.
• A method to grant all users full access to all resources.
• A strategy to limit access based on user preferences.

Digital user authentication can include:

• Security questions
• IP address tracking
• Passwords, biometrics, two-factor authentication, security tokens, single sign-on.
• Email verification