A hospital's IT department needs to ensure that only cardiologists can view patient cardiac records, while nurses can view but not edit them. The hospital uses a central policy server that assigns permissions based on each user's job role. Which access control model is being implemented?

Discretionary Access Control (DAC)

Role-Based Access Control (RBAC)

Attribute-Based Access Control (ABAC)

An administrator needs to grant a group of interns read-only access to a shared project folder, but they must not be able to modify or delete files. The folder currently inherits permissions from the parent folder that give the interns modify access. What should the administrator do to meet the requirement?

Add an explicit deny permission for the interns on the project folder.

Remove the interns from the parent folder's access control list (ACL).

Break inheritance on the project folder and assign the interns read-only permissions.

Change the parent folder's permissions to read-only for everyone.

In an authorization system, what is a 'permission'?

A record of user login activity

A network protocol for secure communication

A rule that grants a user the right to perform a specific action on a resource

A credential used to prove identity

A company is migrating from an on-premises Active Directory to a cloud identity provider. They have a regulatory requirement to keep password hashes on-premises and cannot synchronize passwords to the cloud. However, users must be able to access cloud applications with their existing AD credentials. Which authentication approach best meets these constraints?

Cloud-only accounts with new passwords

Pass-through authentication with password writeback

Federation with Active Directory Federation Services (AD FS)

A small business wants to allow each employee to control access to files they create. The owner wants the file creator to decide who can read or edit each file. Which access control model should be used?

Discretionary Access Control (DAC)

Attribute-Based Access Control (ABAC)

Role-Based Access Control (RBAC)

EC-CouncilNetwork Defense Essentials

Domain 1Objective 5

Authentication Mechanisms and Authorization Systems NDE Practice Questions (Page 3)

Part of the Network Security Fundamentals and Access Control domain, which makes up ~14% of our current practice bank.

47questions here

10free pages

7concepts

Questions 11–15

11application · medium
A hospital's IT department needs to ensure that only cardiologists can view patient cardiac records, while nurses can view but not edit them. The hospital uses a central policy server that assigns permissions based on each user's job role. Which access control model is being implemented?
Select an answer first
12application · medium
An administrator needs to grant a group of interns read-only access to a shared project folder, but they must not be able to modify or delete files. The folder currently inherits permissions from the parent folder that give the interns modify access. What should the administrator do to meet the requirement?
Select an answer first
13foundation · easy
In an authorization system, what is a 'permission'?
Select an answer first
14expert · hard
A company is migrating from an on-premises Active Directory to a cloud identity provider. They have a regulatory requirement to keep password hashes on-premises and cannot synchronize passwords to the cloud. However, users must be able to access cloud applications with their existing AD credentials. Which authentication approach best meets these constraints?
Select an answer first
15application · medium
A small business wants to allow each employee to control access to files they create. The owner wants the file creator to decide who can read or edit each file. Which access control model should be used?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NDE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “NDE” is a trademark of its owner, used for identification only.

Authentication Mechanisms and Authorization Systems NDE Practice Questions (Page 3)

Questions 11–15

A hospital's IT department needs to ensure that only cardiologists can view patient cardiac records, while nurses can view but not edit them. The hospital uses a central policy server that assigns permissions based on each user's job role. Which access control model is being implemented?

In an authorization system, what is a 'permission'?

A small business wants to allow each employee to control access to files they create. The owner wants the file creator to decide who can read or edit each file. Which access control model should be used?

Keep studying — Network Security Fundamentals and Access Control