Free ISA Security Architecture & Access Control Questions and Answers

Question 1

Which security model enforces 'need-to-know' and least privilege principles?

Accepted Answer

Bell-LaPadula Model

Answer

The Bell-LaPadula Model is a state machine model of computer security that focuses on confidentiality. It enforces the "no read up" (Simple Security Property) and "no write down" (*-Property) rules, which are foundational to the 'need-to-know' and least privilege principles. This model ensures that subjects can only access information at or below their security clearance level and cannot write information to a lower security level, thereby protecting sensitive data from unauthorized disclosure.

Question 2

What is the primary purpose of Role-Based Access Control (RBAC)?

Accepted Answer

To assign permissions based on job functions

Answer

Role-Based Access Control (RBAC) is an access control model that assigns permissions to users based on their specific roles or job functions within an organization. Instead of assigning permissions directly to individual users, permissions are grouped into roles, and users are then assigned to appropriate roles. This simplifies access management, ensures users only have the necessary access for their duties, and improves security by enforcing the principle of least privilege.

Question 3

Which component of security architecture ensures systems can recover from failures?

Accepted Answer

Fault Tolerance

Answer

Fault tolerance is a design principle in security architecture that ensures a system can continue to operate without interruption even if one or more of its components fail. This is achieved by incorporating redundant hardware or software components. By having backup systems or components ready to take over, fault tolerance minimizes downtime and ensures business continuity in the event of a failure, thereby enhancing system reliability and resilience.

Question 4

What does MAC (Mandatory Access Control) enforce?

Accepted Answer

System-enforced access based on labels

Answer

Mandatory Access Control (MAC) is a strict access control model where the operating system or security kernel enforces access decisions based on security labels assigned to subjects (users/processes) and objects (files/resources). Users cannot override these system-defined rules, making it highly secure and suitable for environments requiring stringent confidentiality, such as government or military systems. Access is granted only if the subject's security clearance level matches or exceeds the object's classification level.

Question 5

Which protocol is used for centralized authentication in Windows environments?

Accepted Answer

Kerberos

Answer

Kerberos is a network authentication protocol that provides strong authentication for client/server applications by using secret-key cryptography. It is the default authentication protocol used in Microsoft Windows domains (Active Directory) to verify user and service identities. Kerberos prevents unauthorized access by ensuring that both the client and server are who they claim to be, using a trusted third party (Key Distribution Center).

ISA - Information Security Analyst Certification Practice Test

ISA - Information Security Analyst Certification Practice Test

Free ISA Security Architecture & Access Control Questions and Answers