Access Controls ACCISO Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   What is an Access Control List (ACL) primarily used for?

   • ATo encrypt data stored on a disk
   • BTo define which users or groups can access a specific resource and with what permissions
   • CTo authenticate users during login
   • DTo record all access attempts for audit purposes
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   In a capability-based access control system, what does a capability represent?

   • AA log entry that records access attempts
   • BA token or ticket that grants a subject specific rights to an object
   • CA list of all users who can access a resource
   • DA password used to authenticate to a system
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A network administrator is configuring a router to control traffic between two subnets. The administrator needs to allow HTTP traffic from the 'Web' subnet to the 'App' subnet, but block all other traffic. Which mechanism should be used?

   • ACapability list on the router
   • BVLAN configuration on the switch
   • CAccess Control List (ACL) on the router
   • DFirewall rule on the application server
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   What is the primary purpose of the user access provisioning process?

   • ATo remove access rights when an employee leaves
   • BTo monitor user activity for suspicious behavior
   • CTo grant users the appropriate access rights based on their job role and least privilege
   • DTo reset user passwords when they are forgotten
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A hospital's patient-portal application must allow nurses to view only the records of patients currently assigned to their ward, while physicians can view records for any patient they are treating. The application team wants to enforce this without embedding complex logic in the application code. Which access control approach should the security architect recommend?

   • AImplement attribute-based access control (ABAC) with policies that evaluate the user's role, the patient's ward, and the treating-physician relationship.
   • BUse discretionary access control (DAC) so each nurse can manually share patient records with other nurses in the ward.
   • CApply mandatory access control (MAC) with security labels for patient records and nurse clearances.
   • DImplement role-based access control (RBAC) with roles for Nurse and Physician, and assign permissions to each role.
   Reveal Solution Discussion Select an answer first