5.1 - Control Physical and Logical Access to Assets CISSP Practice Questions (Page 2)

Questions 6–10

1. 6foundation · medium

   What is the primary purpose of session management in an application's access control?

   • ATo maintain the user's authenticated state across multiple requests
   • BTo log all user actions for audit
   • CTo assign permissions to new users
   • DTo encrypt all data stored by the application
   Reveal Solution Discussion Select an answer first
2. 7expert · medium

   A research facility has a high-security area that requires strict access control. The facility wants to ensure that only two specific employees can enter, and that their entry is recorded. They also want to prevent unauthorized entry if an employee leaves the company. Which control is most appropriate?

   • AA biometric fingerprint reader with a local database of the two employees' fingerprints.
   • BA combination lock with a code that is changed monthly.
   • CA smart card reader that is integrated with the HR system to automatically revoke access when an employee leaves.
   • DA security guard who checks a list of authorized employees.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A project management application is used by multiple departments. The security team wants to ensure that users can only see projects they are assigned to, and that their access is automatically revoked when they leave the project. Which access control model is best suited for this dynamic requirement?

   • ADiscretionary access control (DAC) where the project owner grants access to individual users.
   • BAttribute-based access control (ABAC) with policies that evaluate user attributes (e.g., department) and resource attributes (e.g., project assignment).
   • CRole-based access control (RBAC) where users are assigned to roles like 'Project Member' and access is based on role membership.
   • DMandatory access control (MAC) where access is based on security labels and clearances.
   Reveal Solution Discussion Select an answer first
5. 9foundation · medium

   Which credential is typically used to authenticate a program or script to a service, rather than a human user?

   • ABiometric scan
   • BPassword
   • CAPI key
   • DSmart card
   Reveal Solution Discussion Select an answer first
6. 10foundation · medium

   What is the primary purpose of a visitor management process in facility access control?

   • ATo provide visitors with network access
   • BTo prevent all unauthorized entry by employees
   • CTo monitor employee productivity
   • DTo track and control the movement of visitors within the facility
   Reveal Solution Discussion Select an answer first