Identification, Authentication, and Authorization ECSS Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   In which authorization model does the owner of a resource decide who can access it and what permissions they have?

   • AAttribute-Based Access Control (ABAC)
   • BRole-Based Access Control (RBAC)
   • CDiscretionary Access Control (DAC)
   • DMandatory Access Control (MAC)
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   An organization is implementing an IAM program. The compliance team requires that access rights be reviewed quarterly and that any user who leaves the company have access revoked within 24 hours. The IT team wants to automate these processes. Which IAM capability is most directly responsible for meeting these requirements?

   • ASingle sign-on (SSO)
   • BAccess control lists (ACLs)
   • CIdentity lifecycle management with automated provisioning and deprovisioning
   • DMulti-factor authentication (MFA)
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   A user enters their username and password, and the system then checks whether that user has permission to open a specific file. Which two processes are demonstrated in this scenario?

   • AAuthentication (username) and authorization (file permission check)
   • BIdentification (password) and authentication (username)
   • CIdentification (username) and authorization (file permission check)
   • DAuthentication (password) and identification (file permission check)
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A network administrator is configuring a file server that hosts project documentation. The administrator needs to allow the 'ProjectAlpha' group to read and write files in the '\Server\Projects\Alpha' folder, while denying the 'Contractors' group any access to that same folder. The administrator has already created both groups and added the appropriate users. What should the administrator configure to enforce this access policy?

   • ACreate a new share and assign it only to the ProjectAlpha group
   • BChange the folder's owner to the ProjectAlpha group
   • CSet an access control list (ACL) on the folder with explicit allow entries for ProjectAlpha and deny entries for Contractors
   • DEnable auditing on the folder to track access attempts
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   What is the primary benefit of Single Sign-On (SSO) for users?

   • AUsers authenticate once and gain access to multiple systems without re-entering credentials
   • BUsers can access systems without any authentication
   • CUsers are granted the same permissions across all systems
   • DUsers no longer need passwords for any system
   Reveal Solution Discussion Select an answer first