ACL Identity & Access Management 3

Question 1

In a mandatory access control (MAC) system, who controls access to resources?

Accepted Answer

A central authority enforces policy based on classification labels

Answer

MAC systems rely on a central authority that enforces access based on security labels and classifications, not individual owner discretion.

Question 2

What is an 'orphan account' in the context of identity lifecycle management?

Accepted Answer

A user account that remains active after the associated employee has left the organization

Answer

Orphan accounts are active user accounts that are no longer associated with a current employee, creating a security risk if not deprovisioned.

Question 3

Which protocol is most commonly used to query and manage directory services for user authentication in enterprise environments?

Accepted Answer

LDAP

Answer

LDAP (Lightweight Directory Access Protocol) is the standard protocol for accessing and maintaining directory information such as user accounts.

Question 4

A user can read a file but cannot modify it. Which type of permission has been applied?

Accepted Answer

Read-only permission

Answer

Read-only permission allows a user to view the contents of a file but prevents any modifications.

Question 5

What is 'privilege creep' in identity and access management?

Accepted Answer

The gradual accumulation of access rights beyond what a user currently needs

Answer

Privilege creep occurs when users accumulate access rights over time—often through role changes—without removing previously granted permissions.

(ACL) Access Control Lists Practice Test