Authentication Mechanisms and Authorization Systems NDE Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   In which access control model does the owner of a resource decide who can access it?

   • ARBAC (Role-Based Access Control)
   • BDAC (Discretionary Access Control)
   • CABAC (Attribute-Based Access Control)
   • DMAC (Mandatory Access Control)
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is the difference between authentication and authorization?

   • AAuthentication is performed by the operating system; authorization is performed by the network
   • BAuthentication is used for data encryption; authorization is used for decryption
   • CAuthentication controls access; authorization verifies identity
   • DAuthentication verifies identity; authorization determines what the user can do
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   What is a potential risk of implementing single sign-on (SSO) in an enterprise?

   • AIf the SSO provider is compromised, all connected applications are at risk
   • BSSO increases network latency for all applications
   • CSSO prevents users from accessing external applications
   • DUsers must remember more passwords
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which authentication mechanism uses a unique physical characteristic of the user, such as a fingerprint or iris pattern?

   • ABiometric
   • BCertificate
   • CPassword
   • DToken
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   An organization is migrating from a legacy local account system to Active Directory. The security team requires that all access decisions be based on user attributes such as department and security clearance. The IT team wants to minimize changes to existing applications. Which approach should they take?

   • AReplace all applications with new ones that support ABAC natively
   • BUse only role-based access control (RBAC) in AD
   • CUse Active Directory with attribute-based access control (ABAC) policies
   • DKeep the legacy local accounts and add AD only for new systems
   Reveal Solution Discussion Select an answer first