CDT Security & Access Management 2 — Questions and Answers
Question 1: Which document security feature uses invisible patterns that appear when photocopied to deter counterfeiting?
- Holographic overlay
- Void pantograph (Correct answer)
- Microprinting
- UV fluorescent ink
Correct answer: Void pantograph
Void pantographs are hidden patterns embedded in document backgrounds that reveal the word 'VOID' when photocopied, making counterfeiting detectable.
Question 2: In document management, 'need-to-know' access control means:
- All employees can access any document upon request
- Access is granted only when operationally required for a specific role (Correct answer)
- Supervisors approve access for every individual request
- Documents are freely shared within a department
Correct answer: Access is granted only when operationally required for a specific role
Need-to-know access restricts document access to individuals whose job functions require that specific information, minimizing unnecessary exposure.
Question 3: What is the primary purpose of a document retention schedule in a security context?
- To increase document storage capacity
- To ensure documents are kept only as long as legally and operationally required (Correct answer)
- To track how often documents are accessed
- To assign ownership to every document
Correct answer: To ensure documents are kept only as long as legally and operationally required
Retention schedules define how long documents must be kept and when they should be securely destroyed, reducing the risk of unauthorized access to outdated sensitive records.
Question 4: Which term describes the process of verifying that a document has not been altered since it was created or last authorized?
- Authentication
- Integrity verification (Correct answer)
- Authorization
- Classification
Correct answer: Integrity verification
Integrity verification confirms that document content remains unchanged, often using checksums, digital signatures, or hash values.
Question 5: A 'clean desk policy' primarily supports document security by:
- Reducing paper usage across the organization
- Preventing unauthorized viewing of sensitive documents left unattended (Correct answer)
- Standardizing desk layouts for ergonomic compliance
- Automating document filing procedures
Correct answer: Preventing unauthorized viewing of sensitive documents left unattended
Clean desk policies require employees to secure or remove sensitive documents when not in use, reducing the risk of unauthorized access or shoulder surfing.
Question 6: When a document management system enforces 'separation of duties,' it means:
- Different departments maintain separate document repositories
- No single user can complete a sensitive transaction without involvement of another (Correct answer)
- Documents are duplicated across multiple secure locations
- Access logs are reviewed by an independent auditor only
Correct answer: No single user can complete a sensitive transaction without involvement of another
Separation of duties requires that critical document actions (e.g., creation and approval) be performed by different individuals to prevent fraud or error.
Question 7: Which access control model assigns permissions based on predefined organizational rules rather than individual identity?
- Discretionary Access Control (DAC)
- Mandatory Access Control (MAC)
- Role-Based Access Control (RBAC) (Correct answer)
- Attribute-Based Access Control (ABAC)
Correct answer: Role-Based Access Control (RBAC)
RBAC grants document access based on a user's role within the organization, making administration scalable and consistent across large teams.
CDT Security & Access Management 2
Which document security feature uses invisible patterns that appear when photocopied to deter counterfeiting?