A company has an identity management system that automatically provisions accounts for new employees. However, when an employee transfers from one department to another, their old permissions are not removed, leading to privilege accumulation. The security team wants to ensure that when a user's role changes, their access is updated to match the new role. What is the best practice?

Disable the user's account and create a new one for the new role

Manually remove permissions when a transfer is reported

Automate role changes in the identity management system to trigger re-provisioning

Implement a periodic access review process to identify and remove excessive permissions

In a file system ACL, what does an entry typically consist of?

A network address and a port number

A resource name and a creation timestamp

A password hash and an expiration date

A user or group identifier and the permissions granted or denied

A company wants to implement biometric authentication for access to a high-security data center. They are concerned about false rejection rates (FRR) and false acceptance rates (FAR). They want to minimize the chance of unauthorized access. Which biometric setting should they prioritize?

Lower the false acceptance rate (FAR)

Lower the false rejection rate (FRR)

Increase the false rejection rate (FRR)

Increase the false acceptance rate (FAR)

Which of the following is a primary goal of a password policy that requires a minimum length and complexity?

To make passwords easier for users to remember

To reduce the risk of brute-force attacks

To eliminate the need for multi-factor authentication

To ensure passwords are never reused across systems

CompTIADataSys+

Domain 4Objective 3

Authentication and Authorization DS0-001 Practice Questions (Page 1)

Part of the Data and database security domain, which accounts for 23% of the DS0-001 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~8–14 in this domain), expect 2–3 from this objective — we provide 35 practice questions to prepare you well beyond it. (estimate)

35questions here

7free pages

10concepts

23%of the exam

Questions 1–5

1expert · hard
A company has an identity management system that automatically provisions accounts for new employees. However, when an employee transfers from one department to another, their old permissions are not removed, leading to privilege accumulation. The security team wants to ensure that when a user's role changes, their access is updated to match the new role. What is the best practice?
Select an answer first
2application · medium
A financial services company wants to strengthen authentication for remote employees accessing the corporate database. They currently use only a username and password. The security team wants to add a second factor that is phishing-resistant and does not require additional hardware for employees. Which MFA method should they implement?
Select an answer first
3foundation · easy
In a file system ACL, what does an entry typically consist of?
Select an answer first
4application · medium
A company wants to implement biometric authentication for access to a high-security data center. They are concerned about false rejection rates (FRR) and false acceptance rates (FAR). They want to minimize the chance of unauthorized access. Which biometric setting should they prioritize?
Select an answer first
5foundation · easy
Which of the following is a primary goal of a password policy that requires a minimum length and complexity?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to DS0-001

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “DS0-001” is a trademark of its owner, used for identification only.

Authentication and Authorization DS0-001 Practice Questions (Page 1)

Questions 1–5

In a file system ACL, what does an entry typically consist of?

A company wants to implement biometric authentication for access to a high-security data center. They are concerned about false rejection rates (FRR) and false acceptance rates (FAR). They want to minimize the chance of unauthorized access. Which biometric setting should they prioritize?

Which of the following is a primary goal of a password policy that requires a minimum length and complexity?

Keep studying — Data and database security