Quiz Access Control

A multinational company experienced data leakage due to unauthorized file sharing among departments. Which principle of access control was most likely violated?

• Separation of Duties

• Need-to-Know Principle

• Least Privilege

• Accountability

• Data Provenance

In a government agency, employees can only access the citizen database during office hours and within the building network. Which control mechanism ensures this restriction?

• Discretionary Access Control

• Temporal Access Policy

• Context-Aware Access Control

• Role-Based Authorization

• Multi-tenant Segmentation

A healthcare application encrypts patient data but fails to log who accessed it. Which access control principle is missing?

• Confidentiality

• Authorization

• Availability

• Accountability

• Non-repudiation

In a university e-learning system, a student (subject) attempts to modify exam results stored in a gradebook (object). Which access right should prevent this?

• Read-only privilege

• Write privilege

• Ownership right

• Execute privilege

• Delegation right

A smart home system allows multiple users to control the same thermostat. The system must differentiate between who requested and who authorized the action. This distinction reflects:

• User hierarchy

• Subject-object mapping

• Trust delegation

• Functional dependency

• Process inheritance

A cloud database administrator grants a temporary data scientist access to a specific dataset but not the schema or configuration files. This illustrates:

• Role inheritance

• Fine-grained object control

• Coarse-grained delegation

• Hybrid privilege escalation

• Function-based segregation

A startup allows employees to set permissions for files they create. Later, one intern accidentally exposes sensitive client data publicly. What is the main weakness of DAC shown here?

• Centralized enforcement

• User-dependent control

• Context-insensitive policies

• Hierarchical assignment

• Over-classification of data

An IT manager at a financial firm assigns file-sharing permissions through Windows file properties. This represents which model of access control?

• Mandatory Access Control

• Role-Based Access Control

• Discretionary Access Control

• Attribute-Based Access Control

• Capability-Based Access Control

In a DAC-based system, Alice shares a file with Bob, who then shares it with Carol without Alice’s knowledge. What security issue arises?

• Ownership ambiguity

• Circular delegation

• Hierarchical override

• Non-discretionary breach

• Tokenized propagation

In a hospital, nurses can update patient charts, but only doctors can authorize prescriptions. Which RBAC concept ensures this distinction?

• Role inheritance

• Role hierarchy

• Separation of Duties

• Contextual attribute

• Dynamic constraint