Access Control & Password Management GSEC Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A company wants to enforce that only the finance team can read the payroll file, but the HR manager must be able to grant temporary read access to an auditor. The system currently uses an access control matrix. Which change would best support this requirement?

   • AUse mandatory access control (MAC) with a clearance level for the auditor
   • BKeep the access control matrix and update it whenever access changes
   • CSwitch to capability lists so each user holds a token for the payroll file
   • DImplement an access control list (ACL) on the payroll file that lists finance team members and allows the HR manager to modify it
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is the primary purpose of adding a unique salt to each password before hashing?

   • ATo make the password longer so it is harder to guess
   • BTo encrypt the password so it can be decrypted later
   • CTo ensure the password meets complexity requirements
   • DTo prevent two users with the same password from having the same hash
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which access control mechanism is a list of permissions attached to an object that specifies which subjects can access it and what actions they can perform?

   • ARole-Based Policy
   • BAccess Control List (ACL)
   • CAccess Control Matrix
   • DCapability
   Reveal Solution Discussion Select an answer first
5. 9application · easy

   A user wants to use a password manager but is concerned about the security of the master password. Which practice is most important?

   • AShare the master password with a trusted colleague
   • BWrite the master password on a sticky note
   • CUse the same master password as the email password
   • DUse a long, unique passphrase for the master password
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A small company uses a shared network drive for project files. The IT admin needs to grant the marketing team read/write access to the 'Campaigns' folder, while the finance team should have read-only access. The admin also wants to prevent any user from modifying the folder's permissions. Which mechanism best enforces this policy?

   • AConfigure an access control list (ACL) on the folder with specific entries for each team and remove inheritance
   • BCreate an access control matrix that lists each user's permissions and store it on the server
   • CIssue a capability token to each user that grants full control over the folder
   • DUse mandatory access control (MAC) labels to classify the folder and require matching clearance
   Reveal Solution Discussion Select an answer first