Data Access Control and Authorization Mechanisms
Data Access Control and Authorization Mechanisms Quiz
Questions
Which of the following is NOT a common data access control model?
- Discretionary Access Control (DAC)
- Mandatory Access Control (MAC)
- Role-Based Access Control (RBAC)
- Attribute-Based Access Control (ABAC)
In DAC, who is responsible for granting and revoking access permissions?
- The data owner
- The system administrator
- The user
- All of the above
Which of the following is NOT a common RBAC role?
- Administrator
- Manager
- User
- Guest
In ABAC, access permissions are granted based on:
- The user's role
- The user's attributes
- The resource's attributes
- All of the above
Which of the following is NOT a common authorization mechanism?
- Access Control Lists (ACLs)
- Capabilities
- Tokens
- Biometrics
ACLs are typically stored:
- In the file system
- In the database
- In the application
- All of the above
Capabilities are typically implemented using:
- Cryptographic keys
- Tokens
- Certificates
- All of the above
Tokens are typically used to:
- Authenticate users
- Authorize users
- Both of the above
- None of the above
Biometrics are typically used for:
- Authentication
- Authorization
- Both of the above
- None of the above
Which of the following is NOT a common data access control best practice?
- Use the principle of least privilege
- Implement role-based access control
- Use strong passwords
- Allow users to share their passwords
Which of the following is NOT a common authorization mechanism best practice?
- Use strong authentication mechanisms
- Use role-based access control
- Use tokens with short expiration times
- Allow users to bypass authorization checks
Which of the following is NOT a common data access control tool?
- Access Control Lists (ACLs)
- Role-Based Access Control (RBAC)
- Attribute-Based Access Control (ABAC)
- Firewalls
Which of the following is NOT a common authorization mechanism tool?
- Tokens
- Certificates
- Biometrics
- Intrusion Detection Systems (IDSs)
Which of the following is NOT a common data access control standard?
- ISO 27001
- ISO 27002
- NIST SP 800-53
- PCI DSS
Which of the following is NOT a common authorization mechanism standard?
- ISO 27001
- ISO 27002
- NIST SP 800-53
- XACML