In which access control model does the owner of an object decide who can access it and what privileges they have?

Attribute-Based Access Control (ABAC)

Discretionary Access Control (DAC)

Role-Based Access Control (RBAC)

A user logs into a system with a username and password. After authentication, the system checks whether the user is allowed to access the payroll folder. Which two processes are being demonstrated?

Authentication and authorization

Identification and authentication

A government agency requires that access to classified documents be determined by the document's classification label and the user's security clearance, not by the document owner's discretion. Which access control model enforces this?

Role-based access control (RBAC)

Discretionary access control (DAC)

Attribute-based access control (ABAC)

A data center wants to protect against both unauthorized physical access and network-based attacks. Which combination of controls provides the most comprehensive coverage?

CCTV cameras and access control lists (ACLs) on routers

Security guards and an intrusion detection system (IDS)

Mantraps, video surveillance, and a next-generation firewall with intrusion prevention

Biometric door locks and a network firewall

EC-CouncilNetwork Defense Essentials

Domain 1Objective 1

Fundamentals of Network Security and Defense NDE Practice Questions (Page 4)

Part of the Network Security Fundamentals and Access Control domain, which makes up ~14% of our current practice bank.

44questions here

9free pages

8concepts

Questions 16–20

16foundation · easy
In which access control model does the owner of an object decide who can access it and what privileges they have?
Select an answer first
17application · easy
A user logs into a system with a username and password. After authentication, the system checks whether the user is allowed to access the payroll folder. Which two processes are being demonstrated?
Select an answer first
18application · medium
A government agency requires that access to classified documents be determined by the document's classification label and the user's security clearance, not by the document owner's discretion. Which access control model enforces this?
Select an answer first
19application · medium
A data center wants to protect against both unauthorized physical access and network-based attacks. Which combination of controls provides the most comprehensive coverage?
Select an answer first
20application · easy
An employee receives an email that appears to be from the CEO, urgently requesting a wire transfer. The email address is slightly different from the CEO's real address. Which type of attack is this?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NDE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “NDE” is a trademark of its owner, used for identification only.