Question 1

What process periodically validates a user's account,access control,and membership role or inclusion in a specific group?

Accepted Answer

A) recertification 
B) revalidation 
C) control audit 
D) group auditing

Question 2

Authorization is granting permission for admittance.

Accepted Answer

A) True 
 B)False

Question 3

Rule-Based Access Control can be changed by users.

Accepted Answer

A) True 
 B)False

Question 4

Which of the following is a simpler subset of Directory Access Protocol?

Accepted Answer

A) SDAP 
B) X.500 Lite 
C) DIB 
D) ADS

Question 5

A user or a process functioning on behalf of the user that attempts to access an object is known as the:

Accepted Answer

A) subject 
B) reference monitor 
C) entity 
D) label

Question 6

Least privilege in access control means that only the minimum amount of privileges necessary to perform a job or function should be allocated.

Accepted Answer

A) True 
 B)False

Question 7

Select the authentication system developed by the Massachusetts Institute of Technology (MIT)to verify the identity of network users.

Accepted Answer

A) Aurora 
B) Kerberos 
C) CHAP 
D) TACACS

Question 8

ACLs provide file system security for protecting files managed by the user.

Accepted Answer

A) True 
 B)False

Question 9

Describe how Kerberos works.

Accepted Answer

The answer of Describe how Kerberos works....

Question 10

User accounts that remain active after an employee has left an organization are referred to as being what type of accounts?

Accepted Answer

A) abandoned 
B) stale 
C) orphaned 
D) inactive

Question 11

To assist with controlling orphaned and dormant accounts,what can be used to indicate when an account is no longer active?

Accepted Answer

A) password expiration 
B) account expiration 
C) last login 
D) account last used

Question 12

What framework is used for transporting authentication protocols instead of the authentication protocol itself?

Accepted Answer

A) CHAP 
B) SAML 
C) EAP 
D) MS-CHAP

Question 13

Attribute-Based Access Control (ABAC)grants permissions by matching object labels with subject labels based on their respective levels.

Accepted Answer

A) True 
 B)False

Question 14

During RADIUS authentication,what type of packet includes information such as identification of a specific AP that is sending the packet and the username and password?

Accepted Answer

A) accounting request 
B) access request 
C) verification request 
D) authentication request

Question 15

Select the XML standard that allows secure web domains to exchange user authentication and authorization data and is used extensively for online e-commerce transactions.

Accepted Answer

A) SAML 
B) LDAPS 
C) TACACS 
D) SDML

Question 16

Employee onboarding refers to the tasks associated with hiring a new employee.

Accepted Answer

A) True 
 B)False

Question 17

What authentication service was developed by Cisco and is an authentication service commonly used on UNIX devices that communicate by forwarding user authentication information to a centralized server?

Accepted Answer

The answer of What authentication service was developed by Cisco...

Question 18

Describe the Bell-LaPadula model.

Accepted Answer

The answer of Describe the Bell-LaPadula model....

Question 19

Which access control model can dynamically assign roles to subjects based on a set of defined rules?

Accepted Answer

A) Role Based Access Control 
B) Mandatory Access Control 
C) Rule Based Access Control 
D) Discretionary Access Control

Question 20

What access control model below is considered to be the most restrictive access control model,and involves assigning access controls to users strictly according to the custodian?

Accepted Answer

A) Mandatory Access Control 
B) Role Based Access Control 
C) Discretionary Access Control 
D) Rule Based Access Control

Exam 12: Access Management

What process periodically validates a user's account,access control,and membership role or inclusion in a specific group?

Authorization is granting permission for admittance.

Rule-Based Access Control can be changed by users.

Which of the following is a simpler subset of Directory Access Protocol?

A user or a process functioning on behalf of the user that attempts to access an object is known as the:

Least privilege in access control means that only the minimum amount of privileges necessary to perform a job or function should be allocated.

Select the authentication system developed by the Massachusetts Institute of Technology (MIT) to verify the identity of network users.

ACLs provide file system security for protecting files managed by the user.

Describe how Kerberos works.

User accounts that remain active after an employee has left an organization are referred to as being what type of accounts?

To assist with controlling orphaned and dormant accounts,what can be used to indicate when an account is no longer active?

What framework is used for transporting authentication protocols instead of the authentication protocol itself?

Attribute-Based Access Control (ABAC)grants permissions by matching object labels with subject labels based on their respective levels.

During RADIUS authentication,what type of packet includes information such as identification of a specific AP that is sending the packet and the username and password?

Select the XML standard that allows secure web domains to exchange user authentication and authorization data and is used extensively for online e-commerce transactions.

Employee onboarding refers to the tasks associated with hiring a new employee.

What authentication service was developed by Cisco and is an authentication service commonly used on UNIX devices that communicate by forwarding user authentication information to a centralized server?

Describe the Bell-LaPadula model.

Which access control model can dynamically assign roles to subjects based on a set of defined rules?

What access control model below is considered to be the most restrictive access control model,and involves assigning access controls to users strictly according to the custodian?