Learn About the Processes and Controls Involved in Identity Management, Authentication, and Access Control. NIST-CYBERSECURITY-FRAMEWORK-2 Practice Questions (Page 6)

Questions 26–29

1. 26expert · medium

   A company is considering implementing biometric authentication for its data center access. What is a key consideration when using biometrics?

   • ABiometrics provide a non-repudiable authentication factor
   • BBiometric data cannot be stolen or replicated
   • CBiometrics are always more secure than other methods
   • DBiometrics are the only method that can be used for multi-factor authentication
   Reveal Solution Discussion Select an answer first
2. 27expert · medium

   A contractor's access to a company's network is set to expire in 30 days, but the project has been extended. The contractor needs continued access for another 60 days. What is the best practice?

   • ACreate a new account with a new expiration date
   • BLeave the account active without updating the expiration date
   • CDisable the account and create a new one after the project ends
   • DExtend the access expiration date by 60 days
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   What is the purpose of deprovisioning in identity lifecycle management?

   • ATo remove or disable a user's access rights when they leave the organization or no longer need access.
   • BTo create a new user account for an employee who has just been hired.
   • CTo reset a user's password when they forget it.
   • DTo assign additional permissions to a user who has been promoted.
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A hospital wants to ensure that only the on-call cardiologist can access the cardiac telemetry system during a shift. The system must automatically adjust access based on the current on-call schedule, and the cardiologist should only see data for patients currently assigned to them. Which access control model best meets these requirements?

   • ARole-Based Access Control (RBAC)
   • BMandatory Access Control (MAC)
   • CAttribute-Based Access Control (ABAC)
   • DDiscretionary Access Control (DAC)
   Reveal Solution Discussion Select an answer first