3.2 - Understand Logical Access Controls CC Practice Questions (Page 5)

Questions 21–23

1. 21foundation · easy

   In a company, the same employee is responsible for both creating vendor invoices and approving payments to those vendors. Which control is most directly violated?

   • AMandatory access control
   • BPrinciple of least privilege
   • CSegregation of duties
   • DDiscretionary access control
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   In a mandatory access control (MAC) model, what determines whether a subject can access an object?

   • AThe user's need to know
   • BThe user's role
   • CThe owner's discretion
   • DThe comparison of security labels and clearances
   Reveal Solution Discussion Select an answer first
3. 23application · medium

   A university is implementing a new student information system. They want to ensure that faculty can only access grades for their own courses, advisors can access records for their assigned students, and registrars can update enrollment data. The system should simplify permission management as staff change roles. What is the best approach?

   • AAllow each faculty member to set permissions on their own course pages.
   • BUse a mandatory access control system with security labels for all users.
   • CGrant each user individual permissions based on their specific job duties.
   • DAssign permissions to roles such as 'Faculty', 'Advisor', and 'Registrar', and then assign users to these roles.
   Reveal Solution Discussion Select an answer first