CIAM Access Control Models 3

Question 1

In RBAC, what term describes the assignment of a role to a user that allows the user to exercise the role's permissions?

Accepted Answer

User-Role Assignment (URA)

Answer

Permission assignment

Answer

Role activation

Answer

Delegation

Question 2

Which RBAC constraint ensures that a user cannot hold two conflicting roles, such as both 'payment initiator' and 'payment approver'?

Accepted Answer

Static Separation of Duty (SSD)

Answer

Role hierarchy

Answer

Cardinality constraint

Answer

Dynamic Separation of Duty (DSD)

Question 3

What distinguishes Dynamic Separation of Duty (DSD) from Static Separation of Duty (SSD) in RBAC?

Accepted Answer

DSD applies constraints at session activation; SSD applies at role assignment

Answer

DSD applies constraints at role assignment; SSD applies at session activation

Answer

DSD uses labels while SSD uses permissions

Answer

DSD is enforced by the OS while SSD is enforced by the application

Question 4

A healthcare system grants doctors read access to all patient records but write access only to their own patients' records. This scenario best illustrates which model?

Accepted Answer

ABAC

Answer

Pure MAC

Answer

RBAC with object-level constraints

Answer

Chinese Wall Model

Question 5

The Chinese Wall Model is primarily designed to prevent:

Accepted Answer

Conflicts of interest between competing organizations

Answer

Unauthorized data deletion

Answer

Privilege escalation attacks

Answer

Insider threats from disgruntled employees

Question 6

In MAC systems, sensitivity labels typically consist of which two components?

Accepted Answer

Classification level and categories (compartments)

Answer

Username and timestamp

Answer

Role name and permission set

Answer

Resource type and access type

Question 7

Which access control model is considered the most flexible but also the most administratively complex due to policy rule management?

Accepted Answer

ABAC

Answer

DAC

Answer

MAC

Answer

RBAC