ACL Identity & Access Management 2

Question 1

In a role-based access control (RBAC) model, what is the primary mechanism used to assign permissions to users?

Accepted Answer

Permissions are assigned to roles, and users are assigned to roles

Answer

In RBAC, permissions are attached to roles rather than individual users, and users gain permissions by being assigned to appropriate roles.

Question 2

Which IAM concept ensures that no single user has enough privileges to complete a sensitive transaction alone?

Accepted Answer

Separation of duties

Answer

Separation of duties requires that critical tasks be split among multiple users to prevent fraud or error by any one individual.

Question 3

What does the term 'provisioning' refer to in identity management?

Accepted Answer

The process of creating and assigning user accounts and access rights

Answer

Provisioning is the process of setting up user identities and granting them the appropriate access rights to systems and resources.

Question 4

An ACL entry that grants access to a specific IP range while denying all others follows which security principle?

Accepted Answer

Explicit allow with implicit deny

Answer

Explicitly allowing only a defined IP range and relying on an implicit deny at the end of the ACL combines explicit allow with implicit deny.

Question 5

Which authentication factor category does a hardware security token (e.g., RSA SecurID) belong to?

Accepted Answer

Something you have

Answer

A hardware token is a physical device the user possesses, placing it in the 'something you have' authentication category.

(ACL) Access Control Lists Practice Test