ISAC Access Control and Authentication

Question 1

What is the principle of "least privilege"?

Accepted Answer

Users should be granted the minimum level of access necessary to perform their job.

Answer

The principle of least privilege (PoLP) is a fundamental security concept that dictates users, programs, and processes should only have the bare minimum permissions required to perform their legitimate functions. This minimizes the potential damage if an account is compromised, as an attacker would only gain access to a limited set of resources. It reduces the attack surface and helps contain breaches.

Question 2

Which of the following is an example of multi-factor authentication (MFA)?

Accepted Answer

Using a password and a fingerprint scanner

Answer

Multi-factor authentication (MFA) enhances security by requiring users to provide two or more verification factors from different categories to gain access. These categories typically include something you know (like a password), something you have (like a phone or security token), and something you are (like a fingerprint or facial scan). A password and a fingerprint scanner combine "something you know" with "something you are," fulfilling the MFA requirement.

Question 3

What is a strong password policy?

Accepted Answer

Requiring passwords to be at least 8 characters long, with a mix of letters, numbers, and symbols

Answer

A strong password policy is essential for protecting accounts from brute-force attacks and dictionary attacks. Requiring a minimum length, typically 8-12 characters or more, combined with a mix of uppercase and lowercase letters, numbers, and special symbols, significantly increases the complexity and entropy of a password. This makes it much harder for attackers to guess or crack.

Question 4

What does two-factor authentication (2FA) protect against?

Accepted Answer

Unauthorized access from compromised credentials

Answer

Two-factor authentication (2FA) adds an extra layer of security beyond just a password. Even if an attacker manages to steal a user's password (e.g., through phishing), they would still need the second factor (like a code from a phone or a fingerprint) to gain access. This significantly reduces the risk of unauthorized access even if the primary credentials are compromised.

Question 5

Why is it important to disable unused user accounts promptly?

Accepted Answer

To prevent unauthorized access through dormant accounts

Answer

Unused or dormant user accounts pose a significant security risk because they are often forgotten, unmonitored, and may retain elevated privileges. If an attacker compromises such an account, they could gain unauthorized access to the system or network without detection. Promptly disabling or deleting these accounts removes potential entry points for malicious actors, strengthening overall security posture.

(ISAC) International Society for the Advancement of Cytometry Practice Test

(ISAC) International Society for the Advancement of Cytometry Practice Test

ISAC Access Control and Authentication