Security & Access Management Flashcards
7 cards from real CDT practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Security & Access Management flashcards as text
Which feature of a public key infrastructure (PKI) ensures that a document signer cannot later deny having signed the document?
Answer: Non-repudiation
Non-repudiation, enforced through digital signatures, cryptographically binds a signature to the signer's private key, preventing denial of authorship.
In document management security audits, a 'least privilege' review checks that:
Answer: Users have only the minimum access rights needed to perform their duties
Least privilege audits identify users with excessive access rights and ensure permissions align with current job functions, reducing the attack surface.
What is the purpose of an access control list (ACL) in a document management system?
Answer: To specify which users or groups are permitted to perform which actions on specific documents
ACLs define permissions at the document or folder level, determining who can read, edit, delete, or share each resource.
When should document access rights be reviewed after an employee changes departments?
Answer: Immediately upon role change to revoke inappropriate prior access
Prompt access review on role change prevents 'privilege creep,' where employees accumulate permissions from previous positions that are no longer appropriate.
A document classification policy typically assigns the highest sensitivity level to information that:
Answer: Would cause severe harm to the organization or individuals if disclosed
The highest classification tiers (e.g., Top Secret or Restricted) apply to documents whose unauthorized disclosure could cause significant damage.
Which security control helps prevent a terminated employee from accessing the document management system after their last day?
Answer: Immediate account deprovisioning upon termination
Deprovisioning—disabling or deleting user accounts immediately upon termination—closes the window for unauthorized post-employment access.
What does a document audit trail typically record?
Answer: Who accessed, modified, printed, or deleted a document and when
Audit trails capture timestamped records of all document interactions, supporting forensic investigations and compliance verification.