SSCP Access Control & Identity Management 2

Question 1

Which access control model assigns permissions based on a user's role within an organization rather than their individual identity?

Accepted Answer

Role-Based Access Control (RBAC)

Answer

RBAC grants access based on job roles, simplifying permission management in organizations.

Question 2

A security administrator wants to ensure that no single employee can both initiate and approve a financial transaction. Which principle does this enforce?

Accepted Answer

Separation of duties

Answer

Separation of duties requires that critical tasks be split among multiple people to prevent fraud or error.

Question 3

Which authentication factor category does a retinal scan belong to?

Accepted Answer

Something you are

Answer

Biometric identifiers like retinal scans fall under 'something you are' authentication factors.

Question 4

What is the primary function of a Privileged Access Workstation (PAW)?

Accepted Answer

To host administrative tasks in a hardened, isolated environment

Answer

A PAW is a dedicated, hardened workstation used exclusively for sensitive administrative tasks to reduce attack surface.

Question 5

When a user is granted the minimum access rights needed to perform their job, which security principle is being applied?

Accepted Answer

Least privilege

Answer

The principle of least privilege limits user access to only what is necessary for their role, reducing exposure.

(SSCP) Security Operations and Administration Practice Test

(SSCP) Security Operations and Administration Practice Test

SSCP Access Control & Identity Management 2