A hospital is implementing an access control system for patient records. They need to ensure that only doctors and nurses involved in a patient's care can access the records, and that access is automatically revoked when the patient is discharged. Which access control model is best suited?

ABAC with patient-care attributes

A multinational corporation needs to implement access control for a document management system. The system must support both role-based access for employees and attribute-based access for external partners (e.g., based on project and confidentiality agreement). Which approach best meets both requirements without duplicating the entire access control infrastructure?

Use MAC for both employees and partners

Use DAC and let each document owner set permissions

Use ABAC for all users, with roles represented as attributes

Implement RBAC for employees and ABAC for partners in two separate systems

What is the primary purpose of Identity and Access Management (IAM)?

To provide physical security for data centers

To encrypt all data stored in the organization

To manage digital identities and enforce authentication and authorization policies

To monitor network traffic for intrusions

Which of the following is a core function of an IAM system?

Managing user accounts and their lifecycle

Performing vulnerability scans on applications

EC-CouncilCertified Cybersecurity Technician

Domain 2Objective 1

Identification, Authentication, and Authorization CCT Practice Questions (Page 8)

Part of the Identity and Network Security Controls domain, which makes up ~20% of our current practice bank.

48questions here

10free pages

8concepts

Questions 36–40

36expert · medium
A hospital is implementing an access control system for patient records. They need to ensure that only doctors and nurses involved in a patient's care can access the records, and that access is automatically revoked when the patient is discharged. Which access control model is best suited?
Select an answer first
37expert · hard
A multinational corporation needs to implement access control for a document management system. The system must support both role-based access for employees and attribute-based access for external partners (e.g., based on project and confidentiality agreement). Which approach best meets both requirements without duplicating the entire access control infrastructure?
Select an answer first
38foundation · easy
What is the primary purpose of Identity and Access Management (IAM)?
Select an answer first
39foundation · easy
Which of the following is a core function of an IAM system?
Select an answer first
40expert · medium
A company is choosing an authentication method for a system that must be accessible to users with disabilities. They need a method that does not require typing and is not affected by physical impairments. Which method is most appropriate?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CCT” is a trademark of its owner, used for identification only.

Identification, Authentication, and Authorization CCT Practice Questions (Page 8)

Questions 36–40

A hospital is implementing an access control system for patient records. They need to ensure that only doctors and nurses involved in a patient's care can access the records, and that access is automatically revoked when the patient is discharged. Which access control model is best suited?

What is the primary purpose of Identity and Access Management (IAM)?

Which of the following is a core function of an IAM system?

A company is choosing an authentication method for a system that must be accessible to users with disabilities. They need a method that does not require typing and is not affected by physical impairments. Which method is most appropriate?

Keep studying — Identity and Network Security Controls