FREE SSCA Access Controls & Identity Management Questions and Answers

Question 1

What is the primary purpose of Role‑Based Access Control (RBAC)?

Accepted Answer

Assign permissions based on job functions

Answer

Role-Based Access Control (RBAC) is a security model that assigns permissions to users based on their specific job functions or roles within an organization. Instead of granting individual permissions, users inherit access rights defined for their role, simplifying management and enforcing the principle of least privilege.

Question 2

In multi‑factor authentication, which factor is considered "something you are"?

Accepted Answer

Fingerprint scan

Answer

In multi-factor authentication, "something you are" refers to a biometric factor, which is a unique physical characteristic of an individual. A fingerprint scan falls into this category, providing a strong and personal method of identity verification beyond just passwords or tokens.

Question 3

What does the principle of least privilege require in an IAM system?

Accepted Answer

Provide limited access needed for job duties

Answer

The principle of least privilege in an Identity and Access Management (IAM) system requires that users are granted only the minimum level of access necessary to perform their specific job duties. This minimizes the potential for unauthorized actions, accidental errors, or malicious activity, enhancing overall security.

Question 4

Which protocol is commonly used for centralized authentication, authorization, and accounting in enterprise networks?

Accepted Answer

RADIUS

Answer

RADIUS (Remote Authentication Dial-In User Service) is a widely used networking protocol for centralized Authentication, Authorization, and Accounting (AAA) services in enterprise networks. It enables secure access to various network resources, such as Wi-Fi and VPNs, by verifying user identities and controlling their access privileges.

Question 5

LDAP, used in many directory services, stands for ____.

Accepted Answer

Lightweight Directory Access Protocol

Answer

LDAP stands for Lightweight Directory Access Protocol. It is an open, industry-standard application protocol used for accessing and maintaining distributed directory information services, commonly employed for storing user and group information and facilitating authentication in many enterprise environments.

SSCA - Systems Security Certified Administrator Practice Test

SSCA - Systems Security Certified Administrator Practice Test

FREE SSCA Access Controls & Identity Management Questions and Answers