A company is migrating from DAC to RBAC to improve security. During the migration, a manager complains that they can no longer share a folder with a colleague without IT involvement. What is the best way to address this while maintaining the benefits of RBAC?

Give the manager the ability to grant access directly

Create a temporary role for the colleague and assign it for the duration of the sharing need

A company's HR system stores employee salaries. The security team wants to ensure that only HR managers can view salary data, and that any unauthorized attempt to view it is logged. Which combination of access control principles is being applied?

Authentication and authorization

Confidentiality and accountability

A security auditor finds that a user has been granted 'write' access to a financial database, but the user's job role only requires 'read' access. The auditor also notes that the user can grant access to other users. Which access control model is likely in place, and what is the primary risk?

ABAC; risk of attribute spoofing

DAC; risk of privilege escalation and unauthorized data modification

A user named Carol is trying to access a file on a network share. The file has an Access Control List (ACL) that grants 'Read' to the 'Users' group and 'Write' to the 'Managers' group. Carol is a member of both groups. What is Carol's effective permission on the file?

Read and Write, because permissions are cumulative

No access, because the permissions conflict

Write only, because the Managers group permission overrides the Users group

Read only, because the most restrictive permission applies

A user named Alice attempts to read a file named report.pdf. In this scenario, which of the following correctly identifies the subject, object, and access?

Subject: report.pdf; Object: Alice; Access: read

Subject: Alice; Object: read; Access: report.pdf

Subject: read; Object: Alice; Access: report.pdf

Subject: Alice; Object: report.pdf; Access: read

EC-CouncilNetwork Defense Essentials

Domain 1Objective 3

Access Control Principles, Terminologies, and Models NDE Practice Questions (Page 1)

Part of the Network Security Fundamentals and Access Control domain, which makes up ~14% of our current practice bank.

22questions here

5free pages

3concepts

Questions 1–5

1expert · hard
A company is migrating from DAC to RBAC to improve security. During the migration, a manager complains that they can no longer share a folder with a colleague without IT involvement. What is the best way to address this while maintaining the benefits of RBAC?
Select an answer first
2application · medium
A company's HR system stores employee salaries. The security team wants to ensure that only HR managers can view salary data, and that any unauthorized attempt to view it is logged. Which combination of access control principles is being applied?
Select an answer first
3expert · hard
A security auditor finds that a user has been granted 'write' access to a financial database, but the user's job role only requires 'read' access. The auditor also notes that the user can grant access to other users. Which access control model is likely in place, and what is the primary risk?
Select an answer first
4application · medium
A user named Carol is trying to access a file on a network share. The file has an Access Control List (ACL) that grants 'Read' to the 'Users' group and 'Write' to the 'Managers' group. Carol is a member of both groups. What is Carol's effective permission on the file?
Select an answer first
5foundation · easy
A user named Alice attempts to read a file named report.pdf. In this scenario, which of the following correctly identifies the subject, object, and access?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NDE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “NDE” is a trademark of its owner, used for identification only.