Security Services Access Control 1 — Questions and Answers
Question 1: What are the three factors of authentication?
- Something you own, something you hear, something you smell
- Something you know, something you have, something you are (Correct answer)
- Something you see, something you touch, something you taste
- Something you buy, something you borrow, something you find
Correct answer: Something you know, something you have, something you are
The three factors of authentication are knowledge (password), possession (card/token), and inherence (biometrics).
Question 2: What is 'two-factor authentication' (2FA)?
- Using two passwords for access
- Verifying identity using two different authentication factors (Correct answer)
- Having two people authorize entry together
- Using two keycards simultaneously
Correct answer: Verifying identity using two different authentication factors
Two-factor authentication requires two separate forms of verification from different categories to confirm a person's identity before granting access.
Question 3: What is a proximity card used for in access control?
- Measuring how close someone stands to a door
- Granting access by holding a card near a reader without physical contact (Correct answer)
- Taking attendance at security briefings
- Storing only personal identification information
Correct answer: Granting access by holding a card near a reader without physical contact
A proximity card uses RFID technology to grant access when held near a reader, eliminating the need to swipe or insert the card.
Question 4: What does 'least privilege' mean in access control?
- Giving users only the minimum permissions needed to do their job (Correct answer)
- Only allowing the lowest-ranked employees access
- Restricting access to the cheapest security areas
- Limiting security guard privileges based on seniority
Correct answer: Giving users only the minimum permissions needed to do their job
The principle of least privilege means granting users only the minimum access rights required to perform their job functions.
Question 5: What is a PIN pad used for in an access control system?
- Decorative purposes at entry points
- Entering a numeric code to verify identity and grant access (Correct answer)
- Connecting the door to the internet
- Logging guard patrol times automatically
Correct answer: Entering a numeric code to verify identity and grant access
A PIN pad requires a user to enter a numeric personal identification number to authenticate their identity and gain access to a secured area.
Question 6: What is 'role-based access control' (RBAC)?
- Granting access based on an employee's physical size
- Assigning access permissions based on a user's role or job function (Correct answer)
- Restricting access based on the time of day
- Granting access randomly to different users
Correct answer: Assigning access permissions based on a user's role or job function
RBAC assigns access rights based on a user's role within an organization, ensuring they can only access resources relevant to their job.
What are the three factors of authentication?