WorksheetsWIX3003 System Access
Total questions: 26
Worksheet time: 12mins
System access comprises the following functions
Access Control
Authorization
Non-repudiation
Authentication
Checking the correct password corresponding to a given username to login is an example of
Authentication
Authorization
Access Control
Amputation
Checking whether or not a given thumbprint corresponds to the information stored in the database is an example of
Authentication
Authorization
Access Control
Tokenisation
Providing a user with access to the admin module is an example of
Authentication
Authorization
Access Control
Masking
The entity responsible to set what a user can access is
the authorization database
the access control policy
the security administrator
NADMA
Digital identity is not meant to be used when the user is engaged in an online transaction
Correct
Wrong
According to NIST SP800-63, digital authentication establishes that a subject is who they claim to be
Correct
Wrong
According to NIST SP800-63, digital identity is a unique representation of a subject engage in an online transaction
Correct
Wrong
According to NIST SP800-63, the process of collecting our MyKad or passport to verify information about us, is an example of identity proofing
Correct
Wrong
According to NIST SP800-63A, an applicant must be physically present in order for identity proofing to be performed
True
False
According to NIST SP800-63A, identity proofing can be done remotely, i.e. without having the user to be physically present
True
False
According to NIST SP800-63, when a user first register in the digital identity model, the user is called
a Subscriber
a Claimant
an Applicant
a Registrar
Examples of a method of authentication involving something the user knows include
smart card
password
staff badge
PIN
Examples of a method of authentication involving something the user has include
thumb print
RFID token
passphrase
student badge
Authenticating using biometrics involves false positives. A false positive can mean
a wrong user being given access
a correct user being denied access
a wrong user being denied access
a correct user being given access
Authenticating using biometrics involves false negatives. A false negative can mean
a wrong user being given access
a correct user being denied access
a wrong user being denied access
a correct user being given access
Passwords can be stored in the clear as long as the salt is hidden
True
False
The salt of a password can be stored in the clear
True
False
In the same system, if two users use the same password and the salts given are also the same, then the hashed passwords are identical
True
False
In the same system, if two users use the same password and the salts given are different, then the hashed passwords are different
True
False
In access control, a PDF document is an example of an Object
True
False
In access control, the ability to just read a particular PDF document is an example of an Access Right
True
False
User A is the owner of file abc.docx and has read and write access. He then assigns another user, B to have read and write access. This scenario is an example of a
discretionary access control (DAC)
mandatory access control (MAC)
role-based access control (RBAC)
attribute-based access control (ABAC)
Process A only has read access to file xyx.xlsx. The process cannot assign the same privilege to other processes. This scenario is an example of a
message authentication code (MAC)
role-based access control (RBAC)
attribute-based access control (ABAC)
mandatory access control (MAC)
Which of the following are examples of consideration when granting access in Role-Based Access Control (RBAC)
whether or not the user is a Technician
whether or not the time of day is between 9am and 5pm
whether or not the user is an Adminstrator
whether or not the user holds a water jet
Which of the following are valid examples of consideration when granting access to a door leading to a room in Attribute-Based Access Control (ABAC)
whether or not the user has TOP SECRET level clearance
whether or not the temperature of the room is between 10 and 15 degrees Celcius
whether or not the day is a week day
whether or not an ambulance is being blocked to allow others to pass
