A user successfully authenticates to a file server, but when attempting to access a confidential project folder, the system denies the request. The user's manager confirms the user should have access. Which of the following best describes the failure?

Authentication failed because the password was incorrect

The user's account is locked out

Authorization failed because the user lacks the required permission

The user's certificate is expired

What is the primary benefit of single sign-on (SSO) for users?

Users can access any application without authentication

Users need to remember only one set of credentials

Users get stronger encryption for their data

Users no longer need to use passwords at all

An organization uses Active Directory for domain authentication. Employees are frustrated by having to enter their credentials separately for the email web portal, the VPN client, and the internal wiki. Management wants to eliminate repeated logins while maintaining centralized control. Which solution should be implemented?

A password manager that auto-fills credentials

Biometric authentication for each application

A separate username and password for each application

Single Sign-On (SSO) using SAML or OIDC integrated with Active Directory

What is the primary purpose of an authorization system?

To verify the identity of a user

To control what resources a user can access and what actions they can perform

To monitor network traffic for anomalies

A government agency handles classified documents. Each document is labeled with a security classification, and each user has a clearance level. Access is granted only if the user's clearance meets or exceeds the document's classification. Which access control model does this describe?

Role-Based Access Control (RBAC)

Discretionary Access Control (DAC)

Attribute-Based Access Control (ABAC)

EC-CouncilNetwork Defense Essentials

Domain 1Objective 5

Authentication Mechanisms and Authorization Systems NDE Practice Questions (Page 5)

Part of the Network Security Fundamentals and Access Control domain, which makes up ~14% of our current practice bank.

47questions here

10free pages

7concepts

Questions 21–25

21application · medium
A user successfully authenticates to a file server, but when attempting to access a confidential project folder, the system denies the request. The user's manager confirms the user should have access. Which of the following best describes the failure?
Select an answer first
22foundation · easy
What is the primary benefit of single sign-on (SSO) for users?
Select an answer first
23application · medium
An organization uses Active Directory for domain authentication. Employees are frustrated by having to enter their credentials separately for the email web portal, the VPN client, and the internal wiki. Management wants to eliminate repeated logins while maintaining centralized control. Which solution should be implemented?
Select an answer first
24foundation · easy
What is the primary purpose of an authorization system?
Select an answer first
25application · medium
A government agency handles classified documents. Each document is labeled with a security classification, and each user has a clearance level. Access is granted only if the user's clearance meets or exceeds the document's classification. Which access control model does this describe?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NDE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “NDE” is a trademark of its owner, used for identification only.