CAP Authorization & Access Control 2

Question 1

Which access control model assigns permissions based on user attributes, resource attributes, and environmental conditions?

Accepted Answer

Attribute-Based Access Control (ABAC)

Answer

ABAC evaluates multiple attributes simultaneously — including subject, object, and environment attributes — to make fine-grained authorization decisions.

Question 2

Under the principle of least privilege, a system administrator who performs daily backups should have which of the following?

Accepted Answer

Only the rights needed to perform backup operations

Answer

Least privilege requires granting only the minimum access necessary for a user to perform their specific job functions.

Question 3

A security label of 'SECRET//NOFORN' in a MAC system indicates that the data is classified SECRET and:

Accepted Answer

Cannot be released to foreign nationals

Answer

NOFORN is a handling caveat meaning the information is not releasable to foreign nationals or foreign governments.

Question 4

Which authorization concept ensures that no single individual can complete a sensitive transaction alone?

Accepted Answer

Separation of duties

Answer

Separation of duties divides critical tasks among multiple people to prevent fraud and error by requiring collusion to circumvent controls.

Question 5

In RBAC, which component maps users to collections of permissions?

Accepted Answer

Role

Answer

In RBAC, roles are defined sets of permissions that are then assigned to users, centralizing permission management.

(CAP) Certified Authorization Professional Practice Test

(CAP) Certified Authorization Professional Practice Test

CAP Authorization & Access Control 2