Access Controls Flashcards
6 cards from real ISC2 CC practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 Access Controls flashcards as text
What is the primary purpose of access control?
Answer: To ensure only authorized users can access resources
Access control ensures that only authorized individuals can access specific systems, data, or physical locations.
Which access control model grants access based on job functions or roles?
Answer: Role-Based Access Control (RBAC)
RBAC (Role-Based Access Control) assigns permissions based on a user's role or job function within an organization.
What is multi-factor authentication (MFA)?
Answer: Requiring two or more different types of authentication factors to verify identity
MFA requires users to provide two or more different authentication factors (something you know, have, or are) to verify identity.
Which authentication factor category does a password belong to?
Answer: Something you know
Passwords, PINs, and security question answers are all knowledge-based 'something you know' authentication factors.
What is the principle of separation of duties?
Answer: Requiring multiple individuals to complete sensitive or critical tasks
Separation of duties requires that critical tasks be divided among multiple individuals to prevent fraud or error by any single person.
Which access control model allows resource owners to determine who can access their resources?
Answer: Discretionary Access Control (DAC)
Discretionary Access Control (DAC) allows the owner of a resource to decide who can access it and what permissions they have.