Identity and Access Management (IAM) Concepts NDE Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   A cloud storage service allows users to share files with specific individuals or groups. The file owner decides who can view or edit each file. Which access control model does this service implement?

   • AMandatory access control (MAC)
   • BAttribute-based access control (ABAC)
   • CRole-based access control (RBAC)
   • DDiscretionary access control (DAC)
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   What is the primary security benefit of multi-factor authentication (MFA) over single-factor authentication?

   • AIt eliminates the need for passwords entirely
   • BIt allows users to share their credentials securely
   • CIt speeds up the login process for users
   • DIt provides a higher level of assurance by requiring two or more independent factors
   Reveal Solution Discussion Select an answer first
4. 33foundation · easy

   What is the primary purpose of Identity and Access Management (IAM) in network security?

   • ATo encrypt all data transmitted across the network to prevent eavesdropping
   • BTo monitor network traffic for malicious activity and block intrusions
   • CTo provide a backup and recovery solution for user data and system configurations
   • DTo ensure that the right individuals access the right resources at the right times for the right reasons
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   In Discretionary Access Control (DAC), who has the authority to grant access to a resource?

   • AA central security policy
   • BThe user who wants access
   • CThe system administrator only
   • DThe resource owner
   Reveal Solution Discussion Select an answer first
6. 35expert · hard

   A company is conducting a quarterly access review. The security team discovers that many employees have accumulated permissions from previous roles that they no longer need. The company wants to clean up these permissions without disrupting current work. Which approach is most effective?

   • AKeep the permissions as they are to avoid potential disruption.
   • BGenerate a report of each user's current permissions and have managers approve or revoke each permission based on current job duties.
   • CReset all users to a default low-privilege profile and grant access only upon request.
   • DImmediately revoke all permissions that have not been used in the last 90 days.
   Reveal Solution Discussion Select an answer first