1.6 Compare Access Control Models 200-201 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   In a Mandatory Access Control (MAC) model, what determines whether a subject can access an object?

   • AThe subject's location and the time of day
   • BThe subject's role and the object's classification
   • CThe subject's identity and the object's owner's preferences
   • DThe subject's clearance and the object's sensitivity label
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   In an ABAC policy, which attribute would be considered an 'environment' attribute?

   • AThe action being performed (e.g., read or write)
   • BThe user's job title
   • CThe file's classification
   • DThe current time of day
   Reveal Solution Discussion Select an answer first
4. 13application · easy

   A company wants to track which employees access a sensitive database and what actions they perform. The security team also needs to ensure that only authenticated users with the 'analyst' role can query the database. Which combination of AAA components addresses these requirements?

   • AAuthentication logs the queries, authorization verifies identity, and accounting grants access.
   • BAuthentication grants access, authorization logs activity, and accounting verifies identity.
   • CAuthentication verifies identity, authorization grants query access to analysts, and accounting logs the queries.
   • DAuthentication and authorization are the same, and accounting is optional.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which AAA component is responsible for recording user activity for auditing and billing?

   • AAuthentication
   • BAccess control
   • CAuthorization
   • DAccounting
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which statement best describes how permissions are typically implemented in a Discretionary Access Control (DAC) system?

   • APermissions are set by a central authority and cannot be changed by users
   • BPermissions are based on the sensitivity labels of the data and the clearance of the user
   • CPermissions are assigned by the resource owner and can be transferred or changed at the owner's discretion
   • DPermissions are automatically derived from the user's job function
   Reveal Solution Discussion Select an answer first