ISC2 CC Access Controls

Question 1

What is the primary purpose of access control?

Accepted Answer

To ensure only authorized users can access resources

Answer

Access control ensures that only authorized individuals can access specific systems, data, or physical locations.

Question 2

Which access control model grants access based on job functions or roles?

Accepted Answer

Role-Based Access Control (RBAC)

Answer

RBAC (Role-Based Access Control) assigns permissions based on a user's role or job function within an organization.

Question 3

What is multi-factor authentication (MFA)?

Accepted Answer

Requiring two or more different types of authentication factors to verify identity

Answer

MFA requires users to provide two or more different authentication factors (something you know, have, or are) to verify identity.

Question 4

Which authentication factor category does a password belong to?

Accepted Answer

Something you know

Answer

Passwords, PINs, and security question answers are all knowledge-based 'something you know' authentication factors.

Question 5

What is the principle of separation of duties?

Accepted Answer

Requiring multiple individuals to complete sensitive or critical tasks

Answer

Separation of duties requires that critical tasks be divided among multiple individuals to prevent fraud or error by any single person.

ISC2 CC - ISC2 Certified in Cybersecurity Practice Test