NEW
Font size
WorksheetsISC3 - Domain 3 - Access Control Concepts
Total questions: 28
Worksheet time: 14mins
Which of the following is an example of security control?
Computer mouse
Firewall
Network cable
Web browser
What is the definition of an object in the context of access controls?
A device with onboard firmware
An entity that responds to a request for service
Anything that initiates a request for service
Something that contains its own access control logic
Derrick logs on to a system to read a file. In this example, Derrick is the ______.
Object
Predicate
Process
Subject
Which of the following is a subject?
Fence
File
Filename
User
What is the strategy that integrates people, technology, and operations capabilities to establish variable barriers across multiple layers and missions of an organization?
Cyberattack Prevention
Layered Defense
Multi-Factor Authentication
Single Point of Failure
How does privileged access management implement the principle of least privilege?
By granting each user access only to the items they need
By granting maximum access to all users
By providing access based on seniority
By restricting access to only the most critical information
In Mandatory Access Control (MAC), what determines the level of access to certain areas in certain government agencies?
Government policy and security clearance
Individual judgment
On a request basis
Owner's discretion
Which of the following is an example of a logical access control method?
Biometrics on a smartphone
Cameras
Security guards
Turnstiles
Limiting access to data on the network would be considered which of the following controls?
Administrative controls
Logical or technical controls
Physical controls
Virtualization controls
What would be considered an administrative control in the context of seat belt usage?
Attaching the seat belt to the car
Building a car with seat belts
Passing a law requiring seat belt use
Using the seat belt
What alternative control could be used if biometric locks on multiple doors are not necessary and access does not need to be audited?
Implementing biometric scanners on all doors
Installing a permanent wall
Removing doors and securing the area permanently
Replacing doors with deadbolt locks
In what type of environment does role-based access control work well?
High-staff turnover and similar access requirements
Limited access requirements for all personnel
Low-staff turnover
Single personnel with unique access requirements
What term is used to describe the situation where someone inherits expanded permissions that are not appropriate for their role in Role-based Access Control (RBAC)?
Access overflow
Permissions anomaly
Privilege creep
Role deviation
What is the key feature of just-in-time privileged access management?
Permanent administrative access
Role-based subsets of privileges
Static privileges
Unrestricted access
Why is it recommended to disable accounts for a period before deletion when an employee leaves the company?
So the ex-employee can't steal secrets
To allow the separated employee access to data
To preserve the integrity of audit trails or files
To speed up the account deletion process
Who can modify security rules in a system governed by Mandatory Access Control (MAC)?
All subjects within the system
Object owners at their discretion
Randomly selected users
Trusted subjects designated as security administrators
Which of these combinations of physical security controls share a single point of failure?
Badge readers and walls
Dogs and bollards
Guards and fences
High-illumination lighting and cameras
What challenges do small and medium businesses face regarding technical controls in payroll systems?
Inadequate physical controls
Insufficient personnel for duty separation
Lack of administrative controls
Limited availability requirements
Which of the following is an example of a physical access control?
Antivirus software
Encryption algorithms
Firewalls
Motion detectors
Duncan and Mira work in the data center at Triffid, Inc. There is a policy in place that requires both to be present in the data center at the same time. If one has to leave for any reason, the other must step out, too, until they can both re-enter. This is called ________.
Blockade
Defense in depth
Multifactor authentication
Two-person integrity
Why is Discretionary Access Control (DAC) not considered very scalable?
It is a hardware-intensive approach
It relies on mandatory access controls
It relies on the discretion of individual object owners
It uses advanced encryption techniques
What is the two-person rule in the context of security strategy?
Two people must be in an area together
Two people must have access to the same information
Two people must have the same combination
Two people must perform the same duties
What is user provisioning in identity management?
Enabling the option to delete a users account
Ensuring a user can always control what they want to access
Ensuring that users are conducting regular antivirus scans
Managing access to resources and information systems
Lakshmi presents a user ID and a password to a system to log on. Which of the following characteristics must the password have?
Confidential
Mathematical
Shared
Unique
What does behavioral biometrics measure?
Characteristics like fingerprint and iris scan
Environmental design elements
Physiological attributes
User actions, such as voiceprints and keystroke dynamics
Which of the following is the responsibility of systems administrators who use privileged accounts?
Handling customer service
Managing financial transactions
Marketing and promotions
Operating systems and applications
Which is a physical control that prevents "piggybacking" or "tailgating," when an unauthorized person follows an authorized person into a controlled area?
Bollard
Fence
Turnstile
Wall
Which of the following is an example of a monitoring tool?
Biometrics
Cameras
Passwords
Turnstiles
