Authentication and Authorization DS0-001 Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A database administrator is configuring a new application. The application has three types of users: admins, managers, and employees. Admins can manage all data, managers can approve requests, and employees can view their own data. The administrator wants to assign permissions based on these job functions. What is the most efficient way to manage permissions?

   • AUse an access control list (ACL) on each record
   • BImplement mandatory access control (MAC) with security labels
   • CAssign permissions directly to each user individually
   • DCreate roles for admin, manager, and employee, and assign users to roles
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A university has multiple systems: student portal, library, and email. Students must log in separately to each system, which leads to frequent password reset requests. The IT department wants to allow students to authenticate once and access all three systems without re-entering credentials. Which solution should they implement?

   • ARole-based access control (RBAC) across all systems
   • BBiometric authentication for each system
   • CSingle sign-on (SSO) using a central identity provider
   • DFederated identity management with a trusted third party
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which of the following is an example of a 'something you have' factor in multi-factor authentication?

   • AA fingerprint scan
   • BA security question answer
   • CA password
   • DA one-time code sent to a smartphone
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A company is implementing a new password policy. They want to balance security with usability. The security team proposes requiring 12-character passwords, complexity, and a 60-day expiration. However, the help desk reports a high volume of password reset calls. Which adjustment would best reduce the help desk load while maintaining security?

   • AImplement MFA and keep the current policy
   • BRemove the complexity requirement
   • CShorten the expiration period to 30 days
   • DIncrease the expiration period to 180 days
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   What is a key benefit of federated identity management for users?

   • AUsers are automatically granted administrative access
   • BUsers can access multiple partner systems with a single set of credentials
   • CUsers can bypass all security controls
   • DUsers must remember a different password for each partner system
   Reveal Solution Discussion Select an answer first