SE Identity and Access Management

Question 1

Which access control model grants permissions based on a user's role within an organization?

Accepted Answer

Role-Based Access Control (RBAC)

Answer

RBAC assigns permissions to roles rather than individuals, simplifying access management based on job function.

Question 2

What is the principle of least privilege?

Accepted Answer

Users should have only the minimum access required to perform their job

Answer

Least privilege limits user and process access to only what is necessary, reducing the attack surface if credentials are compromised.

Question 3

Which authentication factor category does a hardware security key (e.g., YubiKey) belong to?

Accepted Answer

Something you have

Answer

A hardware security key is a physical device the user possesses, making it a 'something you have' authentication factor.

Question 4

What is the primary security purpose of multi-factor authentication (MFA)?

Accepted Answer

Require attackers to compromise multiple independent factors to gain access

Answer

MFA ensures that stealing a single factor (e.g., a password) is insufficient for access, requiring additional proof of identity.

Question 5

Which protocol is commonly used to centralize authentication and authorization for network devices and VPNs?

Accepted Answer

RADIUS

Answer

RADIUS (Remote Authentication Dial-In User Service) centralizes network access authentication and is widely used for VPNs and 802.1X.

SE - Security Engineer Practice Test