SSCP Access Control & Identity Management 3

Question 1

Which technology allows users to authenticate once and gain access to multiple systems without re-entering credentials?

Accepted Answer

Single Sign-On (SSO)

Answer

SSO enables users to log in once and access multiple related systems without repeated authentication.

Question 2

What is the term for an attack where an adversary intercepts an authentication session token to gain unauthorized access?

Accepted Answer

Session hijacking

Answer

Session hijacking involves stealing a valid session token to impersonate an authenticated user.

Question 3

In a Kerberos authentication flow, what does the Ticket Granting Ticket (TGT) allow a user to do?

Accepted Answer

Request service tickets without re-entering their password

Answer

The TGT is used to obtain service tickets from the Key Distribution Center without requiring the user's password again.

Question 4

Which access control approach allows the data owner to determine who can access their resources?

Accepted Answer

Discretionary Access Control (DAC)

Answer

DAC lets the resource owner decide who is granted access, as seen in traditional file system permissions.

Question 5

What is the primary risk associated with excessive user account privileges that accumulate over time through job role changes?

Accepted Answer

Privilege creep

Answer

Privilege creep occurs when users retain old access rights after changing roles, resulting in more access than needed.

(SSCP) Security Operations and Administration Practice Test