EC-CouncilNetwork Defense Essentials
Domain 1Objective 3
Access Control Principles, Terminologies, and Models NDE Practice Questions (Page 3)
Part of the Network Security Fundamentals and Access Control domain, which makes up ~14% of our current practice bank.
22questions here
5free pages
3concepts
Questions 11–15
- 11
A security analyst is documenting access control relationships for a file server. A user named Alice needs to read a project report. In access control terminology, which statement correctly identifies the subject, object, access, and permission?
Select an answer first - 12
A system administrator is configuring a backup server. The administrator wants to ensure that backups are encrypted and that only the backup service account can read them. Which access control principle is the administrator primarily enforcing?
Select an answer first - 13
Which access control model allows the owner of a resource to decide who can access it and what permissions they have?
Select an answer first - 14
A government agency is implementing access control for its document management system. The agency requires that documents be classified (e.g., Public, Confidential, Secret) and that users can only access documents at or below their clearance level. The agency also needs to allow users to share unclassified documents with external partners without IT involvement. Which access control model should the agency implement?
Select an answer first - 15
In an access control context, which term refers to the entity that performs an action on a resource?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “NDE” is a trademark of its owner, used for identification only.