CAP Authorization & Access Control 3

Question 1

Which access control mechanism allows the owner of a resource to grant access to other users at their own discretion?

Accepted Answer

Discretionary Access Control (DAC)

Answer

In DAC, the resource owner has discretion to grant or revoke access to other subjects, such as file owners setting permissions in traditional OS environments.

Question 2

A policy requiring users to log in with separate accounts for administrative versus regular tasks best implements which principle?

Accepted Answer

Least privilege

Answer

Using separate accounts for privileged and regular work limits the exposure of elevated privileges by applying least privilege to each session.

Question 3

In the Bell-LaPadula model, the '*-property' (star property) rule states that a subject:

Accepted Answer

Cannot write data to a lower classification level

Answer

The *-property prevents write-down, ensuring classified information cannot flow to lower classification levels where it shouldn't be accessible.

Question 4

Which of the following is a key difference between authentication and authorization?

Accepted Answer

Authentication verifies identity; authorization determines what actions are permitted

Answer

Authentication establishes identity (who you are), while authorization determines what that authenticated identity is allowed to do.

Question 5

An access control matrix row represents a subject's permissions. What does each column represent?

Accepted Answer

Permissions for a specific object or resource

Answer

In an access control matrix, columns represent objects (resources), and each cell specifies the access rights a subject has to that object.

(CAP) Certified Authorization Professional Practice Test

(CAP) Certified Authorization Professional Practice Test

CAP Authorization & Access Control 3