Question 1

A file or resource owner has the ability to change the permissions on that file or resource.

Accepted Answer

A) MAC 
B) DAC 
C) RBAC 
D) RBOC 
A) MAC 
B) DAC 
C) RBAC 
D) RBOC B

Question 2

Rights tend to be actions that deal with accessing the system itself,process control,and logging.

Accepted Answer

A) True 
 B)False  True

Question 3

Permissions are applied to users,not to groups.

Accepted Answer

A) True 
 B)False  False

Question 4

_______________ is the process of restricting a user's ability to interact with the computer system.

Accepted Answer

Privilege

Question 5

Your boss expressed concern about employees working on the network on weekends.She asks if there is something you can do to ensure that they do not have access.What would be the best way to accomplish this?

Accepted Answer

A) Publish a memo stating that employees will not be allowed to access the network on weekends. 
B) Set time-of-day restrictions on employee accounts for the weekend. 
C) Keep the building locked. 
D) Set up closed-circuit TV cameras on employee workstations. 
A) Publish a memo stating that employees will not be allowed to access the network on weekends. 
B) Set time-of-day restrictions on employee accounts for the weekend. 
C) Keep the building locked. 
D) Set up closed-circuit TV cameras on employee workstations.

Question 6

A(n)_______________ is the unique alphanumeric identifier used by a user when logging into or accessing a system.

Accepted Answer

The answer of A(n)_______________ is the unique alphanumeric identifier used...

Question 7

A network administrator wants to specify the number of days a password must be used before it can be changed again.What domain password policy will need to be configured?

Accepted Answer

A) Enforce password history 
B) Maximum password age 
C) Minimum password age 
D) Minimum password length 
A) Enforce password history 
B) Maximum password age 
C) Minimum password age 
D) Minimum password length

Question 8

_______________ tells the system how many passwords to remember and does not allow a user to reuse an old password.

Accepted Answer

Enforce pa

Question 9

What are password and domain password policies?

Accepted Answer

Password policies are sets of rules that

Question 10

The lowest level of classified information,which is defined as information that would "damage" national security,is known as "unclassified."

Accepted Answer

A) True 
 B)False

Question 11

Windows operating systems use the concept of permissions AND rights to control access to files,folders,and information resources.

Accepted Answer

A) True 
 B)False

Question 12

Groups are used to

Accepted Answer

A) Create a collection of users to simplify privilege management 
B) Circumvent an overly restrictive ACL ruleset 
C) Create a collection of programs simplifying ACL implementation 
D) Separate computers into logical groups that perform similar functions 
A) Create a collection of users to simplify privilege management 
B) Circumvent an overly restrictive ACL ruleset 
C) Create a collection of programs simplifying ACL implementation 
D) Separate computers into logical groups that perform similar functions

Question 13

Describe methods of account management (SSO,time of day,logical token,account expiration).

Accepted Answer

Administrators have many different tools

Question 14

Minimum password age policy specifies the number of days a password may be used before it must be changed.

Accepted Answer

A) True 
 B)False

Question 15

What is the process used to ensure that users have the correct rights to perform their jobs?

Accepted Answer

A) Usage auditing 
B) Audit trails 
C) Privilege management 
D) Escalation auditing 
A) Usage auditing 
B) Audit trails 
C) Privilege management 
D) Escalation auditing

Question 16

User account passwords can be set up to automatically expire.

Accepted Answer

A) True 
 B)False

Question 17

_______________ control what the user is allowed to do with the objects on the system.

Accepted Answer

The answer of _______________ control what the user is allowed...

Question 18

Assigning permissions to a collection of users based on some common criteria is called ____________.

Accepted Answer

The answer of Assigning permissions to a collection of users...

Question 19

Administrator,root,and superuser are accounts that have the power to do anything that can be done on a system.

Accepted Answer

A) True 
 B)False

Question 20

Which of the following is the most effective password policy to enforce for system security?

Accepted Answer

A) Setting password lengths to be 14 characters or more 
B) Setting the password history to be 20 or higher 
C) Setting a password expiration of 60 days 
D) Setting a minimum password age of 180 days or more 
A) Setting password lengths to be 14 characters or more 
B) Setting the password history to be 20 or higher 
C) Setting a password expiration of 60 days 
D) Setting a minimum password age of 180 days or more

Exam 22: Privilege Management

A file or resource owner has the ability to change the permissions on that file or resource.

Rights tend to be actions that deal with accessing the system itself,process control,and logging.

Permissions are applied to users,not to groups.

_______________ is the process of restricting a user's ability to interact with the computer system.

Your boss expressed concern about employees working on the network on weekends.She asks if there is something you can do to ensure that they do not have access.What would be the best way to accomplish this?

A(n)_______________ is the unique alphanumeric identifier used by a user when logging into or accessing a system.

A network administrator wants to specify the number of days a password must be used before it can be changed again.What domain password policy will need to be configured?

_______________ tells the system how many passwords to remember and does not allow a user to reuse an old password.

What are password and domain password policies?

The lowest level of classified information,which is defined as information that would "damage" national security,is known as "unclassified."

Windows operating systems use the concept of permissions AND rights to control access to files,folders,and information resources.

Groups are used to

Describe methods of account management (SSO,time of day,logical token,account expiration).

Minimum password age policy specifies the number of days a password may be used before it must be changed.

What is the process used to ensure that users have the correct rights to perform their jobs?

User account passwords can be set up to automatically expire.

_______________ control what the user is allowed to do with the objects on the system.

Assigning permissions to a collection of users based on some common criteria is called ____________.

Administrator,root,and superuser are accounts that have the power to do anything that can be done on a system.

Which of the following is the most effective password policy to enforce for system security?

Introduction and Security Trends

General Security Concepts

Operational-Organizational Security

The Role of People in Security

Cryptography

Public Key Infrastructure

Standards and Protocols

Physical Security

Network Fundamentals

Infrastructure Security

Authentication and Remote Access

Wireless

Intrusion Detection Systems and Network Security

Baselines

Types of Attacks and Malicious Software

E-Mail and Instant Messaging

Web Components

Secure Software Development

Disaster Recovery, Business Continuity, and Organizational Policies

Risk Management

Change Management

Computer Forensics

Legal Issues and Ethics

Privacy

Filters