A user successfully authenticates to the corporate VPN using a smart card and PIN. After connecting, they attempt to access the finance share but receive an access denied error. The user's manager confirms the user should have read-only access to that share. What is the most likely reason for the access denied error?

The user's smart card certificate has expired.

The user's account lacks the necessary authorization permissions for the finance share.

The VPN connection is not encrypted.

The finance share is configured with MAC controls that override user permissions.

A company uses Active Directory (AD) for on-premises authentication. They are migrating to a cloud-based identity provider and want to keep using their existing AD credentials for cloud applications. Which approach best achieves this while minimizing user disruption?

Export all AD users to a CSV file and import them into the cloud provider as guests.

Set up directory synchronization and federated authentication between AD and the cloud identity provider.

Create new cloud-only accounts for each user and manually assign permissions.

Use LDAP to bind directly to AD from each cloud application.

A company is deploying MFA for its SSO environment. The CISO wants to ensure that MFA cannot be bypassed by an attacker who steals a session cookie. The IT team wants to avoid requiring MFA on every request. Which solution best addresses both concerns?

Disable session cookies entirely

Use short-lived session tokens with MFA at initial authentication and periodic re-authentication

Require MFA on every single request

Use long-lived session tokens with MFA only at initial login

A university wants to grant access to online library resources based on a user's role (student, faculty, staff) and also based on the time of day (e.g., after-hours access for faculty). Which access control model would best support these requirements?

Attribute-Based Access Control (ABAC)

Role-Based Access Control (RBAC)

Discretionary Access Control (DAC)

EC-CouncilNetwork Defense Essentials

Domain 1Objective 5

Authentication Mechanisms and Authorization Systems NDE Practice Questions (Page 1)

Part of the Network Security Fundamentals and Access Control domain, which makes up ~14% of our current practice bank.

47questions here

10free pages

7concepts

Questions 1–5

1application · medium
A user successfully authenticates to the corporate VPN using a smart card and PIN. After connecting, they attempt to access the finance share but receive an access denied error. The user's manager confirms the user should have read-only access to that share. What is the most likely reason for the access denied error?
Select an answer first
2foundation · easy
Which access control model grants permissions based on the user's role within an organization?
Select an answer first
3application · medium
A company uses Active Directory (AD) for on-premises authentication. They are migrating to a cloud-based identity provider and want to keep using their existing AD credentials for cloud applications. Which approach best achieves this while minimizing user disruption?
Select an answer first
4expert · hard
A company is deploying MFA for its SSO environment. The CISO wants to ensure that MFA cannot be bypassed by an attacker who steals a session cookie. The IT team wants to avoid requiring MFA on every request. Which solution best addresses both concerns?
Select an answer first
5application · medium
A university wants to grant access to online library resources based on a user's role (student, faculty, staff) and also based on the time of day (e.g., after-hours access for faculty). Which access control model would best support these requirements?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NDE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “NDE” is a trademark of its owner, used for identification only.

Authentication Mechanisms and Authorization Systems NDE Practice Questions (Page 1)

Questions 1–5

Which access control model grants permissions based on the user's role within an organization?

A company uses Active Directory (AD) for on-premises authentication. They are migrating to a cloud-based identity provider and want to keep using their existing AD credentials for cloud applications. Which approach best achieves this while minimizing user disruption?

A company is deploying MFA for its SSO environment. The CISO wants to ensure that MFA cannot be bypassed by an attacker who steals a session cookie. The IT team wants to avoid requiring MFA on every request. Which solution best addresses both concerns?

A university wants to grant access to online library resources based on a user's role (student, faculty, staff) and also based on the time of day (e.g., after-hours access for faculty). Which access control model would best support these requirements?

Keep studying — Network Security Fundamentals and Access Control