Identification, Authentication, and Authorization ECSS Practice Questions (Page 9)

Questions 41–45

1. 41application · easy

   A user wants to access a secure web portal. The portal first asks the user to enter a unique username, then asks for a password, and finally checks whether the user's account is allowed to access the 'Admin' page. Which of the following correctly describes the sequence of processes?

   • AIdentification (username), authentication (password), authorization (access to Admin page)
   • BIdentification (username), authorization (password), authentication (access to Admin page)
   • CAuthentication (username), identification (password), authorization (access to Admin page)
   • DAuthorization (username), identification (password), authentication (access to Admin page)
   Reveal Solution Discussion Select an answer first
2. 42expert · hard

   A file server has an ACL that grants 'Everyone' read access to a folder. A specific user, 'alice', is a member of the 'Contractors' group, which has been explicitly denied write access to the same folder. Alice attempts to write a file to the folder. What is the outcome?

   • AThe outcome depends on whether Alice is an administrator
   • BAlice is allowed write access because the Everyone allow grants her the permission
   • CAlice is denied both read and write access
   • DAlice is denied write access because the explicit deny for the Contractors group overrides the allow for Everyone
   Reveal Solution Discussion Select an answer first
4. 43application · medium

   An organization wants to automate the process of granting and revoking access rights when employees join, change roles, or leave. Which component of an IAM solution is primarily responsible for this?

   • ASingle sign-on (SSO)
   • BIdentity lifecycle management
   • CAccess control lists (ACLs)
   • DAuthentication mechanisms
   Reveal Solution Discussion Select an answer first
5. 44foundation · easy

   What is the primary goal of Identity and Access Management (IAM)?

   • ATo ensure the right individuals have access to the right resources at the right times for the right reasons
   • BTo encrypt all data stored in the cloud
   • CTo monitor network traffic for malicious activity
   • DTo provide a backup of user data
   Reveal Solution Discussion Select an answer first
6. 45foundation · easy

   Which of the following is an example of a user identification method, as opposed to an authentication method?

   • AInserting a smart card
   • BEntering a password
   • CEntering a username
   • DProviding a fingerprint
   Reveal Solution Discussion Select an answer first