WorksheetsCybersecurity User Access Control Quiz
Total questions: 20
Worksheet time: 10mins
What type of attack attempts to gain unauthorized access by guessing passwords?
a) Phishing
b) Brute force attack
c) Man-in-the-middle attack
d) SQL injection
Which of the following best describes a biometric authentication method?
a) Username and password
b) Security questions
c) Fingerprint scanning
d) CAPTCHA
In the context of access control, what is the principle of least privilege?
a) Giving users full access
b) Denying all access by default
c) Granting the minimum level of access necessary
d) Assigning privileges based on seniority
Which access control model uses roles assigned to users to determine access?
a) Discretionary Access Control (DAC)
b) Mandatory Access Control (MAC)
c) Role-Based Access Control (RBAC)
d) Attribute-Based Access Control (ABAC)
What does the acronym SSO stand for in cybersecurity?
a) Secure Socket Options
b) Single Sign-On
c) Simple Security Operations
d) Secure Sign-On
What is the purpose of a digital certificate in authentication?
a) To store passwords securely
b) To provide a public key for encrypting communications
c) To verify the authenticity of a user or device
d) To log user activities
Which access control method requires manual approval for access requests?
a) Discretionary Access Control (DAC)
b) Mandatory Access Control (MAC)
c) Role-Based Access Control (RBAC)
d) Manual Access Control (MAC)
What is the primary purpose of access control in cybersecurity?
a) To ensure data integrity
b) To prevent unauthorized access to resources
c) To encrypt sensitive data
d) To improve network performance
Which term describes the process of verifying the identity of a user or device?
a) Authorization
b) Accounting
c) Authentication
d) Auditing
In which type of authentication does the system recognize a device previously used by the user?
a) Biometric authentication
b) Two-factor authentication
c) Token-based authentication
d) Device-based authentication
What is the purpose of an access control list (ACL)?
a) To encrypt data
b) To define permissions for objects in a system
c) To monitor network traffic
d) To authenticate users
What is the main function of a directory service in access control?
a) Encrypting data
b) Managing user identities and access permissions
c) Monitoring network traffic
d) Preventing malware infections
Which of the following is a disadvantage of using passwords for authentication?
a) They are easy to remember
b) They are cost-effective
c) They can be easily guessed or cracked
d) They provide multi-factor authentication
What does the acronym MFA stand for in cybersecurity?
a) Multi-Factor Authentication
b) Most Frequent Access
c) Multi-Faceted Authorization
d) Maximum Failover Availability
What is the primary goal of an intrusion detection system (IDS)?
a) To authenticate users
b) To monitor and analyze network traffic for suspicious activity
c) To block malicious software
d) To enforce access control policies
Which of the following is NOT a factor in multi-factor authentication (MFA)?
a) Something you know (password)
b) Something you have (security token)
c) Something you are (biometric)
d) Something you can download (software)
Which protocol is commonly used for secure remote authentication?
a) HTTP
b) FTP
c) SSH
d) SMTP
What is a common method used to enhance the security of password-based authentication?
a) Using default passwords
b) Shortening the password length
c) Implementing password complexity requirements
d) Reusing passwords
What is an example of a physical access control mechanism?
a) Firewall
b) Password
c) Smart card reader
d) Antivirus software
Which of the following is an example of two-factor authentication (2FA)?
a) Username and password
b) Password and security question
c) Password and fingerprint
d) Security question and PIN
