3.2 - Understand Logical Access Controls CC Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which statement is true about mandatory access control (MAC)?

   • AUsers can change access permissions on objects they own.
   • BAccess is granted based on the resource owner's discretion.
   • CAccess decisions are made by the system based on labels and clearances.
   • DAccess is granted based on the user's job role.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A healthcare organization is implementing a new electronic health record (EHR) system. Nurses need to view patient records for their assigned patients, doctors need to view and update records for their patients, and billing staff need to view billing information only. The organization wants to ensure that each user has the minimum access necessary to perform their job. What is the best way to configure access?

   • AGrant all users full access to the EHR system to ensure they can perform any task.
   • BCreate roles for 'Nurse', 'Doctor', and 'Billing' with permissions tailored to their job functions, and assign users to these roles.
   • CAssign permissions individually to each user based on their specific job duties.
   • DUse a mandatory access control system with security labels for all users.
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A large hospital is implementing a new patient records system. The system must ensure that doctors can only view records for their own patients, nurses can only view records for patients in their ward, and billing staff can only view billing information. The hospital also wants to prevent any single employee from both updating patient records and approving billing changes. The hospital has a complex organizational structure with many job roles. What is the best approach?

   • AImplement role-based access control (RBAC) with roles for 'Doctor', 'Nurse', and 'Billing', and use policies to restrict access to specific patients or wards.
   • BGrant all medical staff full access to all patient records to ensure they can provide the best care.
   • CAssign permissions individually to each employee based on their specific job duties.
   • DUse mandatory access control (MAC) with security labels for all patient records.
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A government agency is implementing a new system to manage classified documents. The system must enforce access based on security labels and clearances, and it must also ensure that users have only the access needed for their job. The agency has a large number of users with varying job functions. What is the best way to implement access control?

   • AImplement only role-based access control (RBAC) and assign permissions to roles.
   • BImplement discretionary access control (DAC) and allow document owners to set permissions.
   • CImplement mandatory access control (MAC) with security labels, and use role-based access control (RBAC) to assign users to roles that align with their job functions.
   • DImplement only mandatory access control (MAC) and assign each user a clearance level.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   A company uses role-based access control (RBAC). A new employee joins the finance team. What must the administrator do to grant the employee the appropriate access?

   • AAsk the employee to request access from the resource owner.
   • BAssign the employee to the 'Finance' role.
   • CGrant the employee individual permissions for each resource.
   • DConfigure the employee's security clearance.
   Reveal Solution Discussion Select an answer first