Data Access Control and Authorization Mechanisms

Data Access Control and Authorization Mechanisms Quiz

15 Questions Published

Questions

Question 1 Multiple Choice (Single Answer)

Which of the following is NOT a common data access control model?

  1. Discretionary Access Control (DAC)
  2. Mandatory Access Control (MAC)
  3. Role-Based Access Control (RBAC)
  4. Attribute-Based Access Control (ABAC)
Question 2 Multiple Choice (Single Answer)

In DAC, who is responsible for granting and revoking access permissions?

  1. The data owner
  2. The system administrator
  3. The user
  4. All of the above
Question 3 Multiple Choice (Single Answer)

Which of the following is NOT a common RBAC role?

  1. Administrator
  2. Manager
  3. User
  4. Guest
Question 4 Multiple Choice (Single Answer)

In ABAC, access permissions are granted based on:

  1. The user's role
  2. The user's attributes
  3. The resource's attributes
  4. All of the above
Question 5 Multiple Choice (Single Answer)

Which of the following is NOT a common authorization mechanism?

  1. Access Control Lists (ACLs)
  2. Capabilities
  3. Tokens
  4. Biometrics
Question 6 Multiple Choice (Single Answer)

ACLs are typically stored:

  1. In the file system
  2. In the database
  3. In the application
  4. All of the above
Question 7 Multiple Choice (Single Answer)

Capabilities are typically implemented using:

  1. Cryptographic keys
  2. Tokens
  3. Certificates
  4. All of the above
Question 8 Multiple Choice (Single Answer)

Tokens are typically used to:

  1. Authenticate users
  2. Authorize users
  3. Both of the above
  4. None of the above
Question 9 Multiple Choice (Single Answer)

Biometrics are typically used for:

  1. Authentication
  2. Authorization
  3. Both of the above
  4. None of the above
Question 10 Multiple Choice (Single Answer)

Which of the following is NOT a common data access control best practice?

  1. Use the principle of least privilege
  2. Implement role-based access control
  3. Use strong passwords
  4. Allow users to share their passwords
Question 11 Multiple Choice (Single Answer)

Which of the following is NOT a common authorization mechanism best practice?

  1. Use strong authentication mechanisms
  2. Use role-based access control
  3. Use tokens with short expiration times
  4. Allow users to bypass authorization checks
Question 12 Multiple Choice (Single Answer)

Which of the following is NOT a common data access control tool?

  1. Access Control Lists (ACLs)
  2. Role-Based Access Control (RBAC)
  3. Attribute-Based Access Control (ABAC)
  4. Firewalls
Question 13 Multiple Choice (Single Answer)

Which of the following is NOT a common authorization mechanism tool?

  1. Tokens
  2. Certificates
  3. Biometrics
  4. Intrusion Detection Systems (IDSs)
Question 14 Multiple Choice (Single Answer)

Which of the following is NOT a common data access control standard?

  1. ISO 27001
  2. ISO 27002
  3. NIST SP 800-53
  4. PCI DSS
Question 15 Multiple Choice (Single Answer)

Which of the following is NOT a common authorization mechanism standard?

  1. ISO 27001
  2. ISO 27002
  3. NIST SP 800-53
  4. XACML