WorksheetsChapter 14 Controlling and Monitoring Access
Total questions: 10
Worksheet time: 6mins
Which of the following principles ensures that subjects receive only the privileges necessary to perform their job duties?
Need to know
Least privileges
Separation of Duties and Responsibilities
Context-dependent control
What is one of the 9 safety precautions?
Buy an expensive cybersecurity service
Educate users about security
Have a shared password file.
Change the password every day!
Is it important to encrypt sensitive data in transit, including passwords sent over a network?
True
False
What are the key tasks that security professionals complete early in a risk management process?
Identifying assets
Identifying threats
Identifying vulnerabilities
Identifying potential losses
Identifying users
Which correspond to approaches to identify threats?
Focused on Software
Focused on Programs
Focused on Assets
Focused on Tasks
Focused on Attackers
What is a dictionary attack, and how does it work?
An attempt to discover passwords by using every possible password in a predefined database or list of common or expected passwords.
An attempt to discover passwords for user accounts by systematically attempting all possible combinations of letters, numbers, and symbols.
An attempt to discover passwords by guessing a password randomly and checking whether it matches the stored hash value.
What is access aggregation, and how can it be prevented?
Access aggregation is a type of password attack
Access aggregation is a method of collecting sensitive information
Access aggregation cannot be prevented
Access aggregation refers to collecting multiple pieces of nonsensitive information and combining them to learn sensitive information
Do security methods attempt to prevent loss of confidentiality, loss of integrity, and loss of availability?
False
True
The main difference between permissions, rights and privileges in the context of access control is that permissions and rights are interchangeable whereas privileges refer to the access granted to a specific object.
True
False
How many Access Control Models should you understand when studying for the CISSP certification exam?
(a)
