A hospital is implementing a new electronic health record (EHR) system. The compliance team requires that only physicians, nurses, and lab technicians can access patient records, and each role can only see the data necessary for their job. The system must automatically grant access based on the employee's job title in the HR system. Which access control model should the database administrator implement?

Discretionary access control (DAC) with individual user grants

Role-based access control (RBAC) with roles mapped to job titles

Mandatory access control (MAC) with security labels

Attribute-based access control (ABAC) with user attributes

In an identity management system, what is the function of the 'directory service'?

To manage network firewalls and access rules

To encrypt all data stored in the database

To store and organize user identity information, such as usernames, passwords, and attributes

To provide a user interface for password changes

A company partners with an external vendor that provides a SaaS application. The company wants its employees to use their existing corporate credentials to access the vendor's application without creating separate accounts. Which solution should they implement?

Single sign-on (SSO) within the corporate network

Federated identity management with SAML 2.0

Role-based access control (RBAC) in the vendor's application

Access control list (ACL) on the vendor's application

In which access control model are permissions assigned based on a user's job function, and users are only granted access to resources necessary for that function?

Discretionary Access Control (DAC)

Role-Based Access Control (RBAC)

Attribute-Based Access Control (ABAC)

What is the purpose of enforcing a password expiration policy?

To ensure users change their passwords regularly to reduce the window of exposure if a password is compromised

To make it easier for users to remember their passwords

To eliminate the need for account lockout policies

To comply with all regulatory requirements

CompTIADataSys+

Domain 4Objective 3

Authentication and Authorization DS0-001 Practice Questions (Page 4)

Part of the Data and database security domain, which accounts for 23% of the DS0-001 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~8–14 in this domain), expect 2–3 from this objective — we provide 35 practice questions to prepare you well beyond it. (estimate)

35questions here

7free pages

10concepts

23%of the exam

Questions 16–20

16application · medium
A hospital is implementing a new electronic health record (EHR) system. The compliance team requires that only physicians, nurses, and lab technicians can access patient records, and each role can only see the data necessary for their job. The system must automatically grant access based on the employee's job title in the HR system. Which access control model should the database administrator implement?
Select an answer first
17foundation · easy
In an identity management system, what is the function of the 'directory service'?
Select an answer first
18application · medium
A company partners with an external vendor that provides a SaaS application. The company wants its employees to use their existing corporate credentials to access the vendor's application without creating separate accounts. Which solution should they implement?
Select an answer first
19foundation · easy
In which access control model are permissions assigned based on a user's job function, and users are only granted access to resources necessary for that function?
Select an answer first
20foundation · easy
What is the purpose of enforcing a password expiration policy?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to DS0-001

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “DS0-001” is a trademark of its owner, used for identification only.