Practice Test Geeks(ACL) Access Control Lists Practice Test
← All ACL Flashcard Decks

Identity & Access Management Flashcards

7 cards from real ACL practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Identity & Access Management flashcards as text

  1. What is the function of a RADIUS server in network access control?

    Answer: It provides centralized authentication, authorization, and accounting for network access

    RADIUS (Remote Authentication Dial-In User Service) centralizes AAA—authentication, authorization, and accounting—for users accessing a network.

  2. When configuring an extended ACL on a Cisco router, where is it best practice to place it?

    Answer: As close to the source as possible

    Extended ACLs should be placed close to the source to block unwanted traffic early and avoid consuming unnecessary bandwidth.

  3. Which of the following is a key characteristic of discretionary access control (DAC)?

    Answer: Resource owners can grant or restrict access to their own resources

    In DAC, the owner of a resource has discretion over who can access it and can set permissions accordingly.

  4. What is the primary security benefit of implementing single sign-on (SSO)?

    Answer: It reduces password fatigue and the risk of weak passwords across multiple systems

    SSO lets users authenticate once and access multiple systems, reducing password fatigue and the likelihood of password reuse or weak passwords.

  5. An ACL 'wildcard mask' of 0.0.0.255 applied to 192.168.1.0 matches which range of IP addresses?

    Answer: 192.168.1.0 through 192.168.1.255

    A wildcard mask of 0.0.0.255 ignores the last octet, so it matches all 256 addresses in the 192.168.1.0/24 subnet.

  6. Which term describes the practice of granting users only the minimum access rights needed to perform their job functions?

    Answer: Least privilege

    The principle of least privilege limits user access to only what is required for their specific role, reducing the attack surface.

  7. In a PAM (Privileged Access Management) solution, what is a 'password vault' used for?

    Answer: Securely storing, rotating, and controlling access to privileged account credentials

    A PAM password vault securely stores privileged credentials and can automatically rotate them, preventing unauthorized access.