SSCP Certification SSCP Access Control Systems 3

Question 1

A database administrator can modify any record but a separate auditor must approve deletions. This enforces which principle?

Accepted Answer

Separation of duties

Answer

Separation of duties splits sensitive tasks between multiple people so no single individual can complete a critical action alone.

Question 2

In RBAC, what is a 'role hierarchy'?

Accepted Answer

A structure where senior roles inherit permissions from junior roles

Answer

Role hierarchies allow senior roles to inherit the permissions of subordinate roles, reducing administrative overhead.

Question 3

Which authentication factor category does a hardware OTP token belong to?

Accepted Answer

Something you have

Answer

A hardware OTP token is a physical device the user possesses, placing it in the 'something you have' authentication factor category.

Question 4

What is the Biba model primarily designed to protect?

Accepted Answer

Integrity of data from unauthorized modification

Answer

The Biba model enforces data integrity by preventing subjects from writing to higher-integrity objects or reading from lower-integrity objects.

Question 5

An access control system that evaluates policies using attributes of the user, resource, environment, and action is best described as:

Accepted Answer

ABAC

Answer

Attribute-Based Access Control (ABAC) makes decisions based on a combination of subject, object, environment, and action attributes.

SSCP Certification Practice Test