Free Data Warehousing on AWS: Security and Access Control Questions and Answers

Question 1

Which access control model has non-mandatory labels and allows the resource owner to set privileges to the data they own?

Accepted Answer

DAC

Answer

Discretionary Access Control (DAC) is an access control model where the owner of a resource can grant or revoke access permissions to other users. It is characterized by its flexibility, as access decisions are at the discretion of the resource owner, and it does not typically involve mandatory labels like MAC.

Question 2

Which of the subsequent authentication techniques is the most straightforward?

Accepted Answer

PAP

Answer

Password Authentication Protocol (PAP) is considered the most straightforward authentication technique because it sends usernames and passwords in clear text over the network. While simple to implement, this lack of encryption makes it highly vulnerable to eavesdropping and is generally not recommended for secure environments.

Question 3

Which access control model utilizes a fixed set of access rights to files on the system and is static?

Accepted Answer

MAC

Answer

Mandatory Access Control (MAC) is an access control model where access rights are determined by system-wide security policies, not by the resource owner. It uses security labels (sensitivity levels) assigned to subjects and objects, and access is granted only if the subject's clearance level meets or exceeds the object's classification. This model is static and highly structured.

Question 4

Which of the following authentication protocols issues a ticket to the principal (a user, system, program, etc.) after authenticating it?

Accepted Answer

Kerberos

Answer

Kerberos is a widely used network authentication protocol that provides strong authentication for client/server applications by using secret-key cryptography. After a principal (user or service) authenticates to the Kerberos server, it is issued a ticket, which it then uses to request services from other servers without re-authenticating.

Question 5

Which of the following authentication protocols uses an encrypted challenge and challenges a system to confirm identity?

Accepted Answer

CHAP

Answer

Challenge-Handshake Authentication Protocol (CHAP) is an authentication protocol that periodically verifies the identity of a peer using a three-way handshake. It does not send the password over the network but instead uses a challenge-response mechanism with a one-way hash, making it more secure than PAP.

Data Warehousing on AWS Training Practice Test

Data Warehousing on AWS Training Practice Test

Free Data Warehousing on AWS: Security and Access Control Questions and Answers