A small business wants to improve password security for its employees. The current policy only requires a 6-character password. The owner wants a policy that is strong but still usable. Which password policy is the most balanced?

Require 4-character PINs with a 7-day expiration

Require 6-character passwords with a 30-day expiration

Require 15-character passwords with no expiration

Require 8-character passwords with complexity and a 90-day expiration

A government agency requires that access to classified data be determined by the data's classification level and the user's security clearance. Users cannot change these labels. Which access control model does this describe?

Attribute-based access control (ABAC)

Discretionary access control (DAC)

Role-based access control (RBAC)

Which access control model bases permissions on the identity of the individual user, allowing the owner of a resource to decide who can access it?

Discretionary Access Control (DAC)

Role-Based Access Control (RBAC)

Attribute-Based Access Control (ABAC)

What is a key advantage of using role-based access control (RBAC) over assigning permissions individually to each user?

It automatically grants access to all resources

It ensures that all users have the same level of access

It simplifies permission management by grouping users with similar job functions

It eliminates the need for user authentication

In role-based access control (RBAC), what is the relationship between users, roles, and permissions?

Roles are assigned to permissions, and users are assigned to permissions

Permissions are assigned to roles, and users are assigned to roles

Users and roles are independent, and permissions are assigned to the system

Users are assigned permissions directly, and roles are used only for reporting

CompTIADataSys+

Domain 4Objective 3

Authentication and Authorization DS0-001 Practice Questions (Page 7)

Part of the Data and database security domain, which accounts for 23% of the DS0-001 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~8–14 in this domain), expect 2–3 from this objective — we provide 35 practice questions to prepare you well beyond it. (estimate)

35questions here

7free pages

10concepts

23%of the exam

Questions 31–35

31application · medium
A small business wants to improve password security for its employees. The current policy only requires a 6-character password. The owner wants a policy that is strong but still usable. Which password policy is the most balanced?
Select an answer first
32application · medium
A government agency requires that access to classified data be determined by the data's classification level and the user's security clearance. Users cannot change these labels. Which access control model does this describe?
Select an answer first
33foundation · easy
Which access control model bases permissions on the identity of the individual user, allowing the owner of a resource to decide who can access it?
Select an answer first
34foundation · easy
What is a key advantage of using role-based access control (RBAC) over assigning permissions individually to each user?
Select an answer first
35foundation · easy
In role-based access control (RBAC), what is the relationship between users, roles, and permissions?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to DS0-001

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “DS0-001” is a trademark of its owner, used for identification only.