Security and RBAC Flashcards
6 cards from real KCNA practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 Security and RBAC flashcards as text
What is defense in depth in the context of KCNA security?
Answer: Implementing multiple layers of security controls
Defense in depth uses multiple layers of security controls so that if one layer fails, additional layers continue to provide protection.
Which principle states that users should only have access necessary for their role?
Answer: Principle of least privilege
The principle of least privilege ensures users only have the minimum access rights needed to perform their job functions, limiting potential damage.
In KCNA practice, what is the purpose of vulnerability scanning?
Answer: To identify weaknesses before attackers do
Vulnerability scanning proactively identifies security weaknesses in systems and applications so they can be remediated before exploitation.
What is the recommended response when a security incident is detected in an KCNA environment?
Answer: Follow the incident response plan: contain, eradicate, recover
Following a structured incident response plan ensures containment of the threat, eradication of the cause, and recovery to normal operations.
Which authentication factor is classified as "something you are"?
Answer: Biometric data
Biometric data such as fingerprints, facial recognition, or retinal scans represents the "something you are" authentication factor.
What is the primary purpose of encryption in KCNA security?
Answer: To protect data confidentiality during storage and transmission
Encryption protects data confidentiality by converting information into an unreadable format that can only be decoded with the proper key.