Which access control model grants permissions based on the user's job function within the organization?

Discretionary Access Control (DAC)

Role-Based Access Control (RBAC)

Attribute-Based Access Control (ABAC)

A company has 500 employees across departments. The security team wants to ensure that only the finance department can access the accounting application, and only during business hours. They also want to minimize administrative overhead. Which approach best meets these requirements?

Assign the accounting application permission to all employees, then create a policy that denies access to non-finance users.

Use a mandatory access control (MAC) model where the accounting application is labeled 'Finance' and all users have a clearance level.

Create an individual user account for each finance employee and grant each one direct permission to the accounting application.

Create a role for finance employees and assign the accounting application permission to that role. Add a policy that restricts access to business hours.

A company uses a third-party identity provider (IdP) for employee authentication. They want to allow employees to access a new cloud application that does not support the same authentication protocol as the IdP. What should they do?

Require users to authenticate directly to the new application with a different password.

Abandon the new application and choose one that supports the same protocol.

Create separate accounts in the new application for each employee.

Use a federation gateway that translates between the IdP's protocol and the application's protocol.

A company wants to improve security for remote employees accessing a cloud-based HR portal. Currently, they only use a username and password. Which additional authentication factor would provide the strongest security improvement?

A one-time passcode sent via SMS to the employee's registered mobile phone.

A second password that the employee must enter after the first one.

A hardware security key that the employee plugs into their computer.

A security question such as 'What is your mother's maiden name?'

A company is implementing MFA. They have a mix of employees: some use company-issued smartphones, some use personal devices, and some do not have smartphones. They want to ensure all employees can use MFA without compromising security. What is the best approach?

Require all employees to use biometric authentication on their personal devices.

Require all employees to use SMS-based OTP.

Provide hardware security keys to employees without smartphones and use authenticator apps for those with smartphones.

Allow employees to opt out of MFA if they do not have a smartphone.

CompTIACloud+

Domain 4Objective 2

Identity and Access Management (IAM) CV0-004 Practice Questions (Page 4)

Part of the Security domain, which accounts for 19% of the CV0-004 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~7–11 in this domain), expect 1–2 from this objective — we provide 32 practice questions to prepare you well beyond it. (estimate)

32questions here

7free pages

9concepts

19%of the exam

Questions 16–20

16foundation · easy
Which access control model grants permissions based on the user's job function within the organization?
Select an answer first
17application · medium
A company has 500 employees across departments. The security team wants to ensure that only the finance department can access the accounting application, and only during business hours. They also want to minimize administrative overhead. Which approach best meets these requirements?
Select an answer first
18application · medium
A company uses a third-party identity provider (IdP) for employee authentication. They want to allow employees to access a new cloud application that does not support the same authentication protocol as the IdP. What should they do?
Select an answer first
19application · medium
A company wants to improve security for remote employees accessing a cloud-based HR portal. Currently, they only use a username and password. Which additional authentication factor would provide the strongest security improvement?
Select an answer first
20expert · hard
A company is implementing MFA. They have a mix of employees: some use company-issued smartphones, some use personal devices, and some do not have smartphones. They want to ensure all employees can use MFA without compromising security. What is the best approach?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CV0-004

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CV0-004” is a trademark of its owner, used for identification only.