A company has a high turnover rate in its sales department. When employees leave, their accounts often remain active, and their access to the customer database is not revoked promptly. The security team wants to automate the process of disabling accounts and removing access when an employee is terminated in the HR system. What should they implement?

Role-based access control with quarterly role reviews

Password expiration policy set to 30 days

Automated de-provisioning triggered by HR system events

Periodic manual review of active accounts

Which of the following is a common benefit of implementing single sign-on (SSO) in an organization?

Reduced password fatigue and fewer password reset requests

Guaranteed uptime for all applications

Elimination of all security risks

Increased security by requiring multiple passwords for each application

What is federated identity management (FIM)?

A system where each organization maintains its own separate identity database

A system where users can use the same credentials across multiple organizations or domains

A system that uses only biometric authentication

A system that requires users to have multiple passwords for different applications

A company is implementing MFA for all users. They want to use a method that is resistant to phishing and does not require users to type a code. Which MFA method should they choose?

Push notification to a mobile app

A database administrator is designing access for a new application. The application has a requirement that users in the 'manager' role can approve expense reports, but they should not be able to modify the reports themselves. The administrator is considering using RBAC with a 'manager' role that has both approve and edit permissions. What is the best approach to meet the requirement?

Use an access control list (ACL) to deny edit on the expense report table for the 'manager' role

Assign the 'manager' role with both approve and edit permissions

Create separate roles for 'approver' and 'editor' and assign users to both as needed

Use mandatory access control (MAC) with security labels

CompTIADataSys+

Domain 4Objective 3

Authentication and Authorization DS0-001 Practice Questions (Page 6)

Part of the Data and database security domain, which accounts for 23% of the DS0-001 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~8–14 in this domain), expect 2–3 from this objective — we provide 35 practice questions to prepare you well beyond it. (estimate)

35questions here

7free pages

10concepts

23%of the exam

Questions 26–30

26application · medium
A company has a high turnover rate in its sales department. When employees leave, their accounts often remain active, and their access to the customer database is not revoked promptly. The security team wants to automate the process of disabling accounts and removing access when an employee is terminated in the HR system. What should they implement?
Select an answer first
27foundation · easy
Which of the following is a common benefit of implementing single sign-on (SSO) in an organization?
Select an answer first
28foundation · easy
What is federated identity management (FIM)?
Select an answer first
29application · medium
A company is implementing MFA for all users. They want to use a method that is resistant to phishing and does not require users to type a code. Which MFA method should they choose?
Select an answer first
30expert · hard
A database administrator is designing access for a new application. The application has a requirement that users in the 'manager' role can approve expense reports, but they should not be able to modify the reports themselves. The administrator is considering using RBAC with a 'manager' role that has both approve and edit permissions. What is the best approach to meet the requirement?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to DS0-001

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “DS0-001” is a trademark of its owner, used for identification only.

Authentication and Authorization DS0-001 Practice Questions (Page 6)

Questions 26–30

Which of the following is a common benefit of implementing single sign-on (SSO) in an organization?

What is federated identity management (FIM)?

A company is implementing MFA for all users. They want to use a method that is resistant to phishing and does not require users to type a code. Which MFA method should they choose?

Keep studying — Data and database security