A government agency handles classified documents. Access to these documents must be strictly controlled based on the document's classification level and the employee's security clearance. Which access control model is most appropriate?

Attribute-Based Access Control (ABAC)

Role-Based Access Control (RBAC)

Discretionary Access Control (DAC)

Which activity is an example of identity and access governance?

Installing antivirus software on user workstations.

Auditing user access rights to ensure compliance with internal policies and regulations.

Configuring a firewall to block traffic from a specific IP address.

Resetting a user's password when they call the help desk.

What is a primary weakness of using passwords as the sole authentication method?

They are not accepted by most modern applications.

They require specialized hardware to generate and are expensive to deploy.

They are often weak, reused across accounts, and vulnerable to phishing and brute-force attacks.

They cannot be changed or reset by the user.

Which authentication method is generally considered the strongest among the following?

A smart card that stores a digital certificate and requires a PIN to use.

A password that is 12 characters long and includes numbers and symbols.

A biometric fingerprint scan used alone.

Multi-factor authentication combining a password and a one-time code from an authenticator app.

In which access control model does the owner of a resource have the discretion to grant or deny access to other users?

Role-Based Access Control (RBAC)

Attribute-Based Access Control (ABAC)

Discretionary Access Control (DAC)

Dell NIST Cybersecurity Framework v2.0

Domain 4Objective 2

Learn About the Processes and Controls Involved in Identity Management, Authentication, and Access Control. NIST-CYBERSECURITY-FRAMEWORK-2 Practice Questions (Page 2)

Part of the NIST Framework: PROTECT Function domain, which accounts for 12% of the NIST-CYBERSECURITY-FRAMEWORK-2 exam.

29questions here

6free pages

7concepts

12%of the exam

Questions 6–10

6application · medium
A government agency handles classified documents. Access to these documents must be strictly controlled based on the document's classification level and the employee's security clearance. Which access control model is most appropriate?
Select an answer first
7foundation · easy
Which activity is an example of identity and access governance?
Select an answer first
8foundation · easy
What is a primary weakness of using passwords as the sole authentication method?
Select an answer first
9foundation · easy
Which authentication method is generally considered the strongest among the following?
Select an answer first
10foundation · easy
In which access control model does the owner of a resource have the discretion to grant or deny access to other users?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NIST-CYBERSECURITY-FRAMEWORK-2

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Dell Technologies. “NIST-CYBERSECURITY-FRAMEWORK-2” is a trademark of its owner, used for identification only.