ISC2 CC Access Controls

Question 1

What is the primary purpose of access control?

Accepted Answer

To ensure only authorized users can access resources

Answer

To monitor network traffic

Answer

To encrypt sensitive data

Answer

To detect security incidents

Question 2

Which access control model grants access based on job functions or roles?

Accepted Answer

Role-Based Access Control (RBAC)

Answer

Discretionary Access Control (DAC)

Answer

Mandatory Access Control (MAC)

Answer

Attribute-Based Access Control (ABAC)

Question 3

What is multi-factor authentication (MFA)?

Accepted Answer

Requiring two or more different types of authentication factors to verify identity

Answer

Using multiple passwords for the same account

Answer

Authenticating to multiple systems simultaneously

Answer

Using biometrics as the sole authentication method

Question 4

Which authentication factor category does a password belong to?

Accepted Answer

Something you know

Answer

Something you have

Answer

Something you are

Answer

Something you do

Question 5

What is the principle of separation of duties?

Accepted Answer

Requiring multiple individuals to complete sensitive or critical tasks

Answer

Dividing network access between departments

Answer

Separating development and production environments

Answer

Dividing security responsibilities among team members

Question 6

Which access control model allows resource owners to determine who can access their resources?

Accepted Answer

Discretionary Access Control (DAC)

Answer

Mandatory Access Control (MAC)

Answer

Role-Based Access Control (RBAC)

Answer

Rule-Based Access Control