3.2 - Understand Logical Access Controls CC Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   In a discretionary access control (DAC) model, who is responsible for determining who can access a resource?

   • AThe security policy of the organization
   • BThe system administrator
   • CThe resource owner
   • DThe system based on security labels
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What is the primary purpose of segregation of duties?

   • ATo ensure that no single individual has control over all parts of a critical transaction.
   • BTo reduce the number of users who have access to a system.
   • CTo assign permissions based on the sensitivity of data.
   • DTo allow users to delegate their access rights to others.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A large corporation is implementing a new HR system. HR managers need to view and update employee records, payroll specialists need to process payroll, and regular employees need to view their own records. The company wants to ensure that employees have only the access needed for their job. What is the best approach?

   • AGive all employees the same level of access to simplify management.
   • BUse a mandatory access control system with security labels for all employees.
   • CAssign permissions individually to each employee based on their specific needs.
   • DCreate roles for 'HR Manager', 'Payroll Specialist', and 'Employee' with appropriate permissions, and assign users to these roles.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   An organization applies the principle of least privilege to its user accounts. What is the primary security benefit of this practice?

   • AIt reduces the potential impact of a compromised account.
   • BIt ensures that all users have equal access to resources.
   • CIt simplifies the process of granting access to new employees.
   • DIt eliminates the need for user authentication.
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A research institute has a shared file server where each researcher owns their own project folders. The institute wants to allow researchers to share their folders with colleagues as they see fit, but also wants to ensure that sensitive research data is protected from unauthorized access. The institute is considering whether to use DAC or MAC. What is the most important consideration in this decision?

   • AThe need for researchers to have flexibility in sharing their own folders suggests DAC, but the need to protect sensitive data may require MAC.
   • BDAC is always more secure than MAC because it allows owners to control access.
   • CMAC is always more flexible than DAC because it uses labels.
   • DThe choice between DAC and MAC does not affect security; only the type of data matters.
   Reveal Solution Discussion Select an answer first