Access Controls Flashcards
6 cards from real ISC2 CC practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 Access Controls flashcards as text
What is identity proofing?
Answer: Verifying that a person is who they claim to be before issuing credentials
Identity proofing is the process of verifying a person's real-world identity before establishing their digital identity and credentials.
What is the purpose of account deprovisioning?
Answer: Removing access rights when a user no longer requires them
Deprovisioning is the process of revoking a user's access rights and disabling or deleting accounts when they are no longer needed.
Why is a passphrase generally considered stronger than a typical short password?
Answer: A passphrase is a longer sequence of words that is harder to crack due to its length
A passphrase is a longer string of words that is generally easier to remember but much harder to crack due to its greater length.
Which authentication factor category does a hardware token belong to?
Answer: Something you have
Hardware tokens are possession-based 'something you have' authentication factors that generate one-time codes.
What is federated identity management?
Answer: Allowing identity credentials from one organization to be accepted by another trusted organization
Federated identity management allows users to use their identity credentials from one organization to access resources in another trusted organization or system.
What is the purpose of periodic access reviews?
Answer: To verify that user access rights remain appropriate and remove unnecessary permissions
Periodic access reviews verify that each user's current access rights are still appropriate for their job role and revoke any excess permissions.