ISC2 CC Access Controls 2

Question 1

What does Single Sign-On (SSO) allow users to do?

Accepted Answer

Authenticate once and access multiple systems without re-authenticating

Answer

Use a single very strong password across all systems

Answer

Share login credentials securely with colleagues

Answer

Sign in from a single device only

Question 2

What is the purpose of a privileged account?

Accepted Answer

To provide administrators with elevated permissions for system management tasks

Answer

To give all users elevated access temporarily

Answer

To allow temporary access for contractors

Answer

To bypass security controls for efficiency

Question 3

Which of the following is a biometric authentication method?

Accepted Answer

Retinal scan

Answer

Password

Answer

Smart card

Answer

Question 4

What is account provisioning?

Accepted Answer

The process of creating and configuring user accounts and access rights

Answer

Monitoring user account activity for anomalies

Answer

Disabling inactive user accounts

Answer

Auditing user access permissions

Question 5

What is the purpose of an access control list (ACL)?

Accepted Answer

To define which users or systems have permission to access specific resources

Answer

To log all user access attempts

Answer

To authenticate users to a network

Answer

To encrypt network communications

Question 6

What does 'need to know' mean in the context of access control?

Accepted Answer

Access is granted only to information required to perform a specific job

Answer

Users should know all security policies

Answer

Managers must be notified of all access requests

Answer

Users must know their security classification level