GMI Security & Access Management 2 — Questions and Answers
Question 1: Which access control model assigns permissions based on an individual's job function or title within an organization?
- Discretionary Access Control (DAC)
- Mandatory Access Control (MAC)
- Role-Based Access Control (RBAC) (Correct answer)
- Attribute-Based Access Control (ABAC)
Correct answer: Role-Based Access Control (RBAC)
RBAC grants permissions based on predefined roles tied to job functions, simplifying administration in organizations.
Question 2: In a graphic production environment, which principle ensures employees only have access to the files and systems necessary for their specific job duties?
- Separation of duties
- Least privilege (Correct answer)
- Need to know
- Defense in depth
Correct answer: Least privilege
The principle of least privilege restricts user access rights to only what is strictly needed to perform their job functions.
Question 3: A print production facility requires two separate employees to approve large file releases to prevent fraud. This is an example of:
- Multi-factor authentication
- Separation of duties (Correct answer)
- Role-based access control
- Mandatory access control
Correct answer: Separation of duties
Separation of duties requires multiple people to complete a sensitive task, preventing any single individual from committing fraud undetected.
Question 4: Which type of authentication factor is a fingerprint scanner considered?
- Something you know
- Something you have
- Something you are (Correct answer)
- Somewhere you are
Correct answer: Something you are
Biometric identifiers like fingerprints are categorized as 'something you are' authentication factors.
Question 5: When a GMI-certified professional leaves a company, which immediate security action is most critical?
- Archiving their project files
- Disabling or revoking their system access credentials (Correct answer)
- Transferring their role to another employee
- Deleting their email account
Correct answer: Disabling or revoking their system access credentials
Revoking access credentials immediately upon termination prevents unauthorized access to sensitive systems and files.
Question 6: Which security practice involves periodically reviewing and confirming that user accounts still require the access levels they have been granted?
- Penetration testing
- Access recertification (access review) (Correct answer)
- Vulnerability scanning
- Security information and event management (SIEM)
Correct answer: Access recertification (access review)
Access recertification is a periodic review process to ensure user permissions remain appropriate and remove unnecessary access.
Question 7: In digital asset management for graphic production, a 'watermark' applied to preview files primarily serves which security purpose?
- Encrypting the file contents
- Tracking ownership and deterring unauthorized distribution (Correct answer)
- Compressing large image files
- Improving color accuracy
Correct answer: Tracking ownership and deterring unauthorized distribution
Watermarks on preview files identify ownership and discourage or help detect unauthorized copying or distribution of proprietary artwork.
GMI Security & Access Management 2
Which access control model assigns permissions based on an individual's job function or title within an organization?