Free ISA Security Architecture & Access Control Questions and Answers

Question 1

Which security model enforces 'need-to-know' and least privilege principles?

Accepted Answer

Bell-LaPadula Model

Answer

Biba Model

Answer

Clark-Wilson Model

Answer

Brewer-Nash Model

Question 2

What is the primary purpose of Role-Based Access Control (RBAC)?

Accepted Answer

To assign permissions based on job functions

Answer

To grant admin rights to all users

Answer

To eliminate the need for authentication

Answer

To enforce password complexity rules

Question 3

Which component of security architecture ensures systems can recover from failures?

Accepted Answer

Fault Tolerance

Answer

Encryption

Answer

Firewalls

Answer

VLANs

Question 4

What does MAC (Mandatory Access Control) enforce?

Accepted Answer

System-enforced access based on labels

Answer

User-defined permissions

Answer

Password expiration rules

Answer

Network bandwidth limits

Question 5

Which protocol is used for centralized authentication in Windows environments?

Accepted Answer

Kerberos

Answer

LDAP

Answer

RADIUS

Answer

OAuth

Question 6

What is the goal of the Biba Model?

Accepted Answer

To protect data integrity

Answer

To ensure confidentiality

Answer

To enable anonymous access

Answer

To bypass authentication

Question 7

Which access control method allows owners to set permissions?

Accepted Answer

Discretionary Access Control (DAC)

Answer

Mandatory Access Control (MAC)

Answer

Role-Based Access Control (RBAC)

Answer

Rule-Based Access Control (RBAC)

Question 8

What is a 'zero-trust' architecture principle?

Accepted Answer

Never trust, always verify

Answer

Trust all internal users by default

Answer

Grant admin rights to all devices

Answer

Disable all authentication

Question 9

Which standard provides guidelines for access control in ISO/IEC 27002?

Accepted Answer

ISO/IEC 27002

Answer

NIST SP 800-53

Answer

PCI DSS

Answer

HIPAA